ScanMalware.com

Security Scan Report: f0536692.xsph.ru

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Submitted: Jul 12, 2026, 3:21:05 PMCompleted: Jul 12, 2026, 3:23:54 PMpubliccompleted

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is f0536692.xsph.ru.

Submitted URL: https://f0536692.xsph.ru

The Cisco Umbrella rank of the primary domain is #368,851 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 80%

5
Risk Score

Site hosts a known malicious IP and lacks legitimate content, warranting high risk.

Risk Factors
Low domain ranking
CAPTCHA/bot protection indicating possible abuse
Safety Factors
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable

Details

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

New Tab

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

You're looking at domain 'f0536692.xsph.ru' on the Russian country-code top-level domain (.ru), featuring subdomain 'f0536692'. The second-level label 'xsph' is 4 characters long containing zero vowels alongside 4 consonants. Breaking it apart gives 2 words: x, sph. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of f0536692.xsph.ru

Page Load Overview

75.15s
Total Load Time
1
HTTP Requests
1
Domains
N/A
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:7 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1141.8.197.42Russia
AS35278Sprinthost.ru LLC
11--

Page Statistics

1
Requests
1
Unique Domains
0.0 KB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11F836BF5D6F96394558F83E5EB661865AE3F00FB26898194722C9FE09F11898CF87CC0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:gXfYIkPaAntuxf/N6cw15UxDTt80xhfK6DV/JHnOJwNtPDsTSHsx:+v2AZdxLDV/JH6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:83838:wJ3ATdEIhYZJ8RYSoAbVkJmkYUZQShSECATCBVAwUKooNBQiWAVoKOhgBEHSmbhgCAgK8AkoKAC4kRuDEAhlAuKNtgFPoTAi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc7c7c3d3ffffff
Perceptual Hash:b1339acccc93b364
Difference Hash:0018181616000000
Wavelet Hash:fcdcc4c4003c3c3c
Color Hash:#2d2e86

Other Hashes

Crop Resistant:0018181616000000

Scan History

Scan history not available

Unable to load historical scan data