ScanMalware.com

Security Scan Report: icollections.github.io

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ea265e3e-cc89-4f20-a64e-e8164c67bf91Domain and IP registration (RDAP)/api/v1/rdap/ea265e3e-cc89-4f20-a64e-e8164c67bf91How often this domain was scanned/api/v1/domain/stats/icollections.github.ioScan history for this domain/api/v1/domain/history/icollections.github.io?limit=15
This website contacted 3 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is github.io and was registered 13 years ago.

Submitted URL: https://icollections.github.io

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

Anonymous github.io page distributing a 'pre-activated' crack of the commercial macOS app iCollections as an unsigned .dmg; no forms or IoC hits, but cracked-software downloads carry high malware risk. Do not run the file.

Risk Factors (4)
Cracked/'pre-activated' commercial software distribution — typically bundles adware, PUPs or malware in the installer
Unsigned third-party .dmg download hosted on a disposable free hosting subdomain
No verifiable ownership/attribution to the legitimate software vendor
Payment/credential step deliberately bypassed ('no purchase required'), a hallmark of warez pages
Safety Factors (6)
No credential, login, or payment forms on the page (0 forms, 0 password fields, 0 payment fields)
No threat-intelligence matches against the page or its resources
No JavaScript malware patterns (hunting rule) and no obfuscated or cross-origin exfiltration scripts detected
No network IDS alerts and no known malicious kit in the kit roster
Page content is generic product documentation/FAQ for a desktop-organizer app
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

iCollections 9.7.2 for macOs

Scan Type

public

Domain Name Analysis

The domain name 'icollections.github.io' uses the British Indian Ocean Territory country-code top-level domain (.io), featuring subdomain 'icollections'. The core label 'github' covers 6 characters containing two vowels alongside four consonants. Splitting it apart reveals three words: g, it, hub. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://icollections.github.io

Page Load Overview

1.28s
Total Load Time
155 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,258 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software83% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
83%
documentation technical
65%
download file sharing
58%
government public service
47%
entertainment media
42%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2185.199.109.153Fastly · CDNUnited States
AS54113Fastly, Inc.
0185.199.111.153Fastly · CDNUnited States
AS54113Fastly, Inc.
0185.199.108.153Fastly · CDNUnited States
AS54113Fastly, Inc.
23--

Detected Technologies4

Varnish
40%
HSTS
40%
GitHub Pages
40%
Fastly
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19C1412374E25187B6A17D275E3A353588A869C0C2D058DAA1DBDA03B783726041FDF3D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:WKKv+0ZQTe6o84cbXpGkVE6jZ/EA1gtzC6V53ToqWixajY4p1322FvR5/pfgBQW:uZZIk2jXVE6FD1+zCW5kxiUnbJR9pfgl

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:203445:EZiIFCq0TAkDE0EeAAYKCkgSeBAtRCcQHCIVEms4k4FYAC4EEQsBxQmHKMoDp6pgkHgAACAgg2IQEClweLoSFqCKPgCIEUTA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7ffe7c3c3c3ff
Perceptual Hash:b3cecc318e669998
Difference Hash:0a4c680c9e9e9e20
Wavelet Hash:04002501c3c3c1dd
Color Hash:N/A

Other Hashes

Crop Resistant:0a4c680c9e9e9e20,f4faf6f8f8f0f0c0,acaedebc9cfc78f8

Scan History

Scan history not available

Unable to load historical scan data