ScanMalware.com

Security Scan Report: fukk.pw

Redirected to:
https://t.me/owkcheqbot?start=open
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fcab6af4-5880-4a4b-b413-c610e1d8b2b9Domain and IP registration (RDAP)/api/v1/rdap/fcab6af4-5880-4a4b-b413-c610e1d8b2b9How often this domain was scanned/api/v1/domain/stats/fukk.pwScan history for this domain/api/v1/domain/history/fukk.pw?limit=15
This website contacted 3 IPs in 2 countries across 4 domains to perform 11 HTTP transactions. The main domain is fukk.pw and was registered 8 months ago.

Submitted URL: http://fukk.pw

Effective URL:
https://t.me/owkcheqbot?start=open
Redirected

AI Security Verdict

High Risk

Confidence: 82%

7
Risk Score

The site impersonates Telegram using an unranked domain without any credential collection; treat as high‑risk phishing and report.

Risk Factors (4)
Brand impersonation of Telegram on unrelated domain
Domain fukk.pw is unranked in Cisco Umbrella top 1 M
Use of Telegram branding (og:site_name, page title) without official affiliation
Potential phishing landing page directing to Telegram bot link
Domain age information unavailable

Details

Page Title

Telegram: Launch @owkcheqbot

Scan Type

public

Domain Name Analysis

Domain 'fukk.pw' uses the .pw country-code top-level domain with no subdomain. Its registrable label 'fukk' stretches across 4 characters containing one vowel alongside 3 consonants. Breaking it apart gives two words: fu, kk. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Camp) ESSE ET se Bis ee Be Soe ee gre Pee as AIR x OS Bee . 2 as Biaon Fo E ae «2 & EN Ben 5 er ‘9 < ee we WEB. Qe ER Ss 3 ae a EN er ng Kara Se oats oh | oe, Kinder Pingui I @owkchegbot Ro oer c...

Page Load Overview

1.00s
Total Load Time
185 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:57%
Script:Latin
Direction:ltr

Detection Details

Text Length:141 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network95% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
95%
cryptocurrency blockchain
60%
technology software
59%
download file sharing
56%
healthcare medical
48%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5188.114.97.3United States
AS13335Cloudflare, Inc.
3149.154.175.204Amsterdam, North Holland, Netherlands
AS59930Telegram Messenger Inc
3149.154.167.99Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
113--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T192322BD713B0440A12AB8457BE2BB65CB923F4CBF0251940B6EDCA57EBC3ED28463E55

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:BoFBBBtSQPSuSqugxuOoRnigni6U3qV0OKPGZqBdcv4K:Byr7SRuVVoPOqVbeFnK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10962:CXC8aAA8AFrYGBCC2kPDAOihA5GB5QRIMkYABIIEQICFiWUdCAAGJG0FwIQlwDQbQgAWIiwKEBP0OJUgUcSIsDABAf0XYgFQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7f1f1f0b00e0f0f0
Perceptual Hash:8c9cd4e3f3c1c9c1
Difference Hash:b2bbb2b28e808080
Wavelet Hash:7f1f1f0b00e0f0f8
Color Hash:N/A

Other Hashes

Crop Resistant:b2bbb2b28e808080

Scan History

Scan history not available

Unable to load historical scan data