ScanMalware.com

Security Scan Report: americanexcf.u191p0x.asia

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1ea2b542-7c7a-41f7-abf7-b99ee6fc48a2Domain and IP registration (RDAP)/api/v1/rdap/1ea2b542-7c7a-41f7-abf7-b99ee6fc48a2How often this domain was scanned/api/v1/domain/stats/americanexcf.u191p0x.asiaScan history for this domain/api/v1/domain/history/americanexcf.u191p0x.asia?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is u191p0x.asia and was registered 11 months ago.

Submitted URL: https://americanexcf.u191p0x.asia/yxhZxla

AI Security Verdict

Low Risk

Confidence: 60%

3
Risk Score

Only an empty nginx 403 page on an unranked, opaque .asia subdomain. No forms, no brand impersonation, and no threat-intel, hunting rule or phishing/malware IDS hits; risk is limited to unverifiable, disposable-looking hosting.

Risk Factors (2)
Opaque random-looking host and URL path (u191p0x.asia/yxhZxla) unranked in Cisco Umbrella, a common pattern for disposable campaign infrastructure
No legitimate content, contact details, or business identity could be verified — page is unreachable/forbidden to visitors
Safety Factors (3)
No credential-harvesting or payment form is present on the page
No Indicators of Compromise, hunting rule, Safe Browsing, or malware/phishing IDS alerts
Domain is over 6 months old (registered ~329 days ago)
Domain age information unavailable

Details

Page Title

403 Forbiddenother network

Scan Type

public

Domain Name Analysis

You're looking at domain 'americanexcf.u191p0x.asia' on the .asia top-level domain and includes subdomain 'americanexcf'. The second-level label 'u191p0x' is 7 characters long split between one vowel and two consonants; it also includes four digits. Tokenizing the label suggests five words: u, 191, p, 0, x. The median word length lands at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

403 Forbidden nginx/1.31.7

Page Load Overview

2.33s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🇩🇰Danish
Code: da
Confidence:72%
Script:Latin
Direction:ltr

Detection Details

Text Length:40 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
343.165.175.126Tokyo, Tokyo, Japan
AS132203Tencent Building, Kejizhongyi Avenue
31--

Detected Technologies2

Envoy
40%
Bootstrap
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T126D02257FF1FAC8CAA4326F009C73684C088C222C88688108B42028361C366FC4C3354

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:qzxUigso5vxEH9cS9NVuBLx0AqWDgs01lIgLPJINqz:kxRgso5OcE/Wx0Aqogs01lIgrWU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:1a06a3d7a74c3f293961ff91dad79641

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:e666666666666626
Difference Hash:0c00000000000000
Wavelet Hash:007fcfcf00000000
Color Hash:N/A

Other Hashes

Crop Resistant:0c00000000000000

Scan History

Scan history not available

Unable to load historical scan data