ScanMalware.com

Security Scan Report: kaspi-mall.vip

Redirected to:
https://kaspi-mall.vip/login
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ed43123a-37b0-4dab-a654-5878271e3e24Domain and IP registration (RDAP)/api/v1/rdap/ed43123a-37b0-4dab-a654-5878271e3e24How often this domain was scanned/api/v1/domain/stats/kaspi-mall.vipScan history for this domain/api/v1/domain/history/kaspi-mall.vip?limit=15
This website contacted 4 IPs in 3 countries across 4 domains to perform 38 HTTP transactions. The main domain is kaspi-mall.vip and was registered 1 month ago.

Submitted URL: http://kaspi-mall.vip/

Effective URL:
https://kaspi-mall.vip/login
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake Kaspi-branded e-commerce login on a 13-day-old, unranked kaspi-mall.vip domain harvesting username and password. Classic brand-impersonation credential phishing — do not enter credentials.

Risk Factors (5)
Brand impersonation of Kaspi on an unrelated domain
Credential (username/password) login form on a domain only 13 days old
Deceptive hostname: brand name + .vip TLD instead of the brand's official domain
Unranked/no reputation domain claiming to be a major global e-commerce platform
Placeholder 'Coming Soon' page title inconsistent with the polished branded login page
Domain age information unavailable

Details

Page Title

Coming Soon

Scan Type

public

Domain Name Analysis

The domain 'kaspi-mall.vip' uses the .vip top-level domain without a subdomain. The core label 'kaspi-mall' covers 10 characters containing three vowels alongside six consonants, along with 1 hyphen. Segmentation suggests four words: k, as, pi, mall. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://kaspi-mall.vip/

Page Load Overview

0.90s
Total Load Time
6.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:343 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping75% confidence
Type: static
Method: ml+structural

All Detected Categories

e-commerce shopping
75%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1118.185.240.224Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
9149.154.167.99Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
9142.250.154.95Google · CDNUnited States
AS15169Google LLC
9142.251.13.94Google · CDNUnited States
AS15169Google LLC
384--

Detected Technologies1

Vue.js
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T148620E126651113F017BD0C0A2F66F2565A3F38FE10D4810B9BE026D9FEBEA2B467576

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:CZIVUa9j8eneNeGeGee1x2r5iYwSv22lsLH:7x9j8eneNeGeGee1x2r5iYw4sLH

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:15713:eJStQw7qqRtO7ikJwDhBBBHkaROxcCoJKVIQAWAIKBxCFAQBhwUGgsEiUGAEGABlpcCBwbKKAPAgTYcc9UUnttRSNpByhgRi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfcfcfc6ceccf8
Perceptual Hash:b8b9c7c6c6993864
Difference Hash:609898999c989840
Wavelet Hash:feccccccc0cccce0
Color Hash:#b279d2

Other Hashes

Crop Resistant:609898999c989840,7fdfcefafafaf67f

Scan History

Scan history not available

Unable to load historical scan data