ScanMalware.com

Security Scan Report: aptekabc.ru

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cd98a239-55a9-4025-8f12-dcd5207ed0ceDomain and IP registration (RDAP)/api/v1/rdap/cd98a239-55a9-4025-8f12-dcd5207ed0ceHow often this domain was scanned/api/v1/domain/stats/aptekabc.ruScan history for this domain/api/v1/domain/history/aptekabc.ru?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 8 HTTP transactions. The main domain is aptekabc.ru and was registered 5 years ago.

Submitted URL: https://aptekabc.ru

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Compromised WordPress blog injected with the ClearFake Polygon/EtherHiding loader and rival-kit cleanup script; threat intel also flags the domain as a malware loader. Do not visit.

Risk Factors (5)
Injected ClearFake blockchain-contract loader (EtherHiding) distributing next-stage malware
Second injected ClearFake script disabling rival kits and blocking navigation while showing its overlay
Site is compromised — defacement signatures from two attacker handles present in page content
Primary domain flagged in threat intelligence as a malware loader
Domain absent from Cisco Umbrella top 1M rankings
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'aptekabc.ru' on the Russian country-code top-level domain (.ru) without a subdomain. The registrable portion 'aptekabc' spans 8 characters holding three vowels versus five consonants. Segmentation suggests three words: apt, eka, bc. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://aptekabc.ru

Page Load Overview

0.78s
Total Load Time
168 KB
Total Size

Language Analysis

Primary Language

🇸🇮SL
Code: sl
Confidence:50%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,475 chars
Detector Agreement:100%
Language mismatch: Declared as en-US but detected as sl

Website Classification

Primary Category

gambling betting100% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
100%
education learning
100%
entertainment media
100%
finance banking
100%
government public service
95%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8159.253.23.246Jõhvi, Ida-Virumaa, Estonia
AS198068Cloud.dog Ou
81--

Detected Technologies7

WordPressv6.9.1
100%
MetaGenerator
100%
MySQL
50%
PHPv8.3.17
40%
Nginxv1.26.1
40%
WordPress Site Editor
30%
WordPress Block Editor
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15883D6A057B44CF5697F833B9D64A318A537E902CA0577E5E0F3E150648CBA60AE3B0F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:mekclkL5ypFz1nmdmZobXemlUVuXwamHMG6/IYQlWOtA/7t9xhLi0vCPv:mekclkL0UdmZobXemlUVugamnYQlNtAg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:88383:LygocN0VJgCIEkSiXZFEnENYAYi0DFgF30IIJTPQB1EuBAhCKoBVIBgO6ICOCKJCgAoBzrR8gN4UEGocLwwAEAMMUPsinziD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefefeffffffffff
Perceptual Hash:d55555aaaaaa8c55
Difference Hash:0000000808000000
Wavelet Hash:0e0e3e26061e3e3e
Color Hash:N/A

Other Hashes

Crop Resistant:0000000808000000

Scan History

Scan history not available

Unable to load historical scan data