Security Scan Report: router.family

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 4 domains to perform 59 HTTP transactions. The main domain is router.family and was registered 2 weeks ago.

Submitted URL: https://router.family/

AI Security Verdict

Low Risk

Confidence: 65%

3
Risk Score

New 7-day-old domain offering AI-model routing, paid in crypto to a wallet address. No forms, no brand impersonation (explicit disclaimer), no threat-intel hits; self-branded. Age and crypto top-up warrant caution only.

Risk Factors (2)
Very newly registered domain (7 days old) requesting crypto top-ups to a wallet address, described as prepaid and non-refundable
Unranked domain with no established reputation
Safety Factors (6)
No credential or payment form fields of any kind
Explicit disclaimer of affiliation with all mentioned brands (references, not impersonation)
Self-branding consistent with the domain name
No Indicators of Compromise, YARA, IDS or Safe Browsing hits
No cross-origin scripts or credential exfiltration
Verdict names no specific threat, and DOM analysis found no password field (real or disguised) or payment field and no other hard signal — elevated score unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

router.family · every AI model, paid in any coin

Scan Type

public

Domain Name Analysis

The domain name 'router.family' uses the .family top-level domain without a subdomain. Its registrable label 'router' stretches across 6 characters holding three vowels versus 3 consonants. Segmentation suggests one word: router. The median word length lands at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://router.family/

Page Load Overview

3.12s
Total Load Time
874 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,405 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain96% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

cryptocurrency blockchain
96%
finance banking
81%
government public service
70%
adult content
69%
documentation technical
60%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17216.198.79.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
14142.251.127.95Google · CDNUnited States
AS15169Google LLC
14192.178.183.94Google · CDNUnited States
AS15169Google LLC
1484.32.176.16Amsterdam, North Holland, Netherlands
AS59642UAB Cherry Servers
594--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1395386A29556E63F90278AC9537A6F3531EFA0BFE9464111E6FC87B807CFC60B942C41

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:ng1ngO9yXdPCCHUngO9cLyBkxHcLyBUnFkCHkngO910iI8oF/XCH6ngOGCHs:nOrzgr8S

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:61037:QBAVgUU2CgyQDoiCLSEkaMmHoNAAZwwcaAYoYgSAW/h4hdGEKIkQ6aIRQNA9AHJ+ljWEaUiCWQAkKgqvbRQsID2QBHsCSJGQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:013010200c1e1c00
Perceptual Hash:9a666d9a67699226
Difference Hash:4d6525637db8110d
Wavelet Hash:05b9b1310f1f1f0f
Color Hash:#5e40bf

Scan History

Scan history not available

Unable to load historical scan data