ScanMalware.com

Security Scan Report: wmvv-vvhatsapp.shop

Redirected to:
https://www.bing.com/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fa38ff88-8de0-4ad3-883a-5b9e5e597d70Domain and IP registration (RDAP)/api/v1/rdap/fa38ff88-8de0-4ad3-883a-5b9e5e597d70How often this domain was scanned/api/v1/domain/stats/wmvv-vvhatsapp.shopScan history for this domain/api/v1/domain/history/wmvv-vvhatsapp.shop?limit=15
This website contacted 29 IPs in 3 countries across 15 domains to perform 425 HTTP transactions. The main domain is wmvv-vvhatsapp.shop.

Submitted URL: https://wmvv-vvhatsapp.shop

Effective URL:
https://www.bing.com/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

4
Risk Score

Redirect from an unrelated 'whatsapp'-styled domain lands on the genuine Microsoft Bing homepage with only search forms — no credential or payment capture, no malware signals. Host-level Spamhaus DROP alert keeps it at moderate caution.

Risk Factors (3)
Entry domain wmvv-vvhatsapp.shop is an unfamiliar, unranked host unrelated to the site it redirects to and styled after the WhatsApp name
HIGH IDS alert: ET DROP Spamhaus DROP Listed Traffic Inbound group 1
Page scripts disable DevTools/right-click (weak anti-analysis signal)
Safety Factors (4)
Final rendered page is Microsoft Bing on www.bing.com, a top-100 Cisco Umbrella domain, reached through cross-domain redirects
No credential, password or payment fields on the page; forms are ordinary search/image-search inputs
No Indicators of Compromise, no hunting rule malware matches, no Safe Browsing or phishing/malware IDS signature
Download chain continues to Microsoft-owned login.microsoftonline.com and login.live.com rather than to an unrelated host
Domain age information unavailable

Details

Page Title

Suche – Microsoft Bing

Scan Type

public

Domain Name Analysis

Domain 'wmvv-vvhatsapp.shop' uses the commerce-oriented generic top-level domain (.shop) with no subdomain. Count 14 characters in 'wmvv-vvhatsapp' containing two vowels alongside 11 consonants, notching one hyphen. Tokenizing the label suggests six words: w, mvv, v, v, hats, app. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Vermisster Teenager nach Was ist das flrein Irrsinn?* [J Seltene Autnahme aus Koln: [J Tote Lisa aus Marzahn: Streit um 77 Immobilien des JJ BVB gegen Schalke: Dieses Tagen im australischen, — Leser z...

Page Load Overview

3.11s
Total Load Time
8.4 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:3,697 chars
Detector Agreement:88%

All Detected Languages

🇩🇪de(94%)🇺🇸en(4%)🇸🇪sv(2%)

Website Classification

Primary Category

corporate50% confidence
Type: spa
Method: structural

All Detected Categories

corporate
50%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9323.53.42.169Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
5723.194.190.158Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1492.123.104.20Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1423.207.210.146Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
142.21.20.134Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
14150.171.109.99Azure · CLOUDUnited States
AS8075Microsoft Corporation
1474.151.238.136Azure · CLOUDDulles, Virginia, United States
AS8075Microsoft Corporation
1420.190.160.64Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
1440.126.32.74Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
1492.123.104.35Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
42529--

Detected Technologies4

X-UA-Compatible
100%
Open-Graph-Protocolvwebsite
100%
Nginx
40%
Akamai Bot Manager
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T190A48D6AA441303E812B43D0E4DB570EB3275113AA864E24ED59D23C9BEDFDF1437A6E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:+LtezHZTcR74oaHXZ8scOKPFRTuc2ASGeOKUcSL7+tuDXhaCQ+:WezHZWa3Z8scOKPFRTuc2ASGeOKhcblJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:454895:AA4NdFIOyAkonANUD59jBgiBhxZSgtAFoJHokLl4HAESOMrKmTACMCkRADg4iPkGxJKIBoCyRQAZEOKgFJgTUrAGARs2Q6QA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00f0f0e0007affff
Perceptual Hash:e57a8c193be50e0e
Difference Hash:33c14d8c88d2d257
Wavelet Hash:00f8e0e0007affff
Color Hash:06c01000000

Other Hashes

Crop Resistant:33c14d8c88d2d257,3991c0e4044ecc8e,3391e00c4c8854d2

Scan History

Scan history not available

Unable to load historical scan data