ScanMalware.com

Security Scan Report: bugaltera-kilo.click

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cee3416a-b205-44cb-910f-ce7a5aee0303Domain and IP registration (RDAP)/api/v1/rdap/cee3416a-b205-44cb-910f-ce7a5aee0303How often this domain was scanned/api/v1/domain/stats/bugaltera-kilo.clickScan history for this domain/api/v1/domain/history/bugaltera-kilo.click?limit=15
This website contacted 3 IPs in 2 countries across 3 domains to perform 14 HTTP transactions. The main domain is bugaltera-kilo.click and was registered 1 month ago.

Submitted URL: https://bugaltera-kilo.click/

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

Primary domain carries a single-source 'fakeapp (malware)' threat-intel tag, and the page is an unverified personal service offering Telegram bots and money operations. No forms or script malware seen, but avoid sending funds or files.

Risk Factors (3)
Content-malware indicator ('fakeapp') associated with the scanned primary domain
Site offers unlicensed 'financial operations' (currency exchange, payment top-ups) via a personal Telegram-based service
No verifiable corporate identity, legal notice or contact details for a site handling money transfers
Domain age information unavailable

Details

Page Title

SOFEL | Programmer

Scan Type

public

Domain Name Analysis

The domain name 'bugaltera-kilo.click' uses the .click top-level domain with no subdomain. The registrable portion 'bugaltera-kilo' spans 14 characters containing six vowels alongside seven consonants, along with one hyphen. It segments into four words: bug, alter, a, kilo. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bugaltera-kilo.click/

Page Load Overview

0.77s
Total Load Time
361 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:873 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing/scam40% confidence
Type: static
Method: structural

All Detected Categories

phishing/scam
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6193.233.75.208Frankfurt am Main, Hesse, Germany
AS209207Digital Hosting Provider LLC
4142.251.110.95Google · CDNUnited States
AS15169Google LLC
4142.251.110.94Google · CDNUnited States
AS15169Google LLC
143--

Detected Technologies2

Ubuntu
40%
Nginxv1.24.0
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T126F2A59A66E710593423E1A96BE7930D3374D007D606CD2C7BDE2298CF866ECD6C678C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:i4HIB6OsWHIWmeqQRCqxFu7caA8SC12Ey6:i4Hm6lWoWmeqQRCqxFu7caAG1L

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:36730:QRmB1sYiaRAqBkACwyJwCxBH9wMGhRCImYASZnAECb0sDsUABw0gI40FISMBAmgpkSRZT2sCkYMQAqmMRQOAVAwABIJC4BIg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:cc3333cc6633cccc
Difference Hash:1109301432320c10
Wavelet Hash:7bfd19183a18127e
Color Hash:#d22d35

Other Hashes

Crop Resistant:1109301432320c10

Scan History

Scan history not available

Unable to load historical scan data