Security Scan Report: x-help.plus

Redirected to:
https://x-help.plus/help-center
Site favicon
Submitted: May 19, 2026, 7:10:10 AMCompleted: May 19, 2026, 7:11:32 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 2 countries across 4 domains to perform 27 HTTP transactions. The main domain is x-help.plus and was registered NaN years ago.

Submitted URL: http://x-help.plus/

Effective URL: https://x-help.plus/help-centerRedirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

10
Risk Score

The site impersonates X‑WORLD+ on a brand‑new, unranked domain and triggers a critical C2 malware alert – confirmed scam.

Risk Factors
Brand impersonation with domain mismatch
Extremely new (2‑day) domain
Unranked / low‑reputation domain
Critical malware C2 alert from IDS
Absence of legitimate brand verification
Domain age information unavailable

Details

Page Title

Служба техподдержки компании X-WORLD+ - X-HELP+

Scan Type

public

Language

🇷🇺

Russian

(60% confidence)

Category

technology software

(93%)

Domain Information

The domain 'x-help.plus' uses the .plus top-level domain. The registrable portion 'x-help' spans 6 characters containing one vowel alongside four consonants, plus 1 hyphen. Breaking it apart gives two words: x, help. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://x-help.plus/

Page Load Overview

12.05s
Total Load Time
14
HTTP Requests
4
Domains
74 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:60%
Script:Cyrillic
Direction:ltr

Detection Details

Language Code:ru
Detection Confidence:60%
Script Type:Cyrillic
HTML Lang Attribute:en
Text Length:3,466 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as ru

Website Classification

Primary Category

technology software93% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
93%
government public service
39%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5142.251.14.94United States
AS15169Google LLC
3194.67.208.183Moscow, Moscow, Russia
AS209641Ihor Hosting Ltd
3188.114.96.3United States
AS13335Cloudflare, Inc.
3142.250.154.95United States
AS15169Google LLC
144--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1172419B7190409DEFE7F9E418CEB7E082181D12AF417658A7AC80D4A2AC8FD7759C35E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:FI6b9W6JW78ZokAymPv1vsu873lmMQ7/KOcV+z8/Mjwd:zbHJWYZcy41vsv3lmR7/KOcY5jwd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:226257:o4QAAEA40UDjLyAwIQiKoUohAU5VqBIQBLngyEIBlCoRI05BaQGkBEQ/0FaSQpDA2QLDAnAKQEYBAACEciSQxhxFYAIQFGOV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000ffffffffff
Perceptual Hash:9f0730f0b0b44f9b
Difference Hash:dce8683e30220039
Wavelet Hash:000000ffffffff00
Color Hash:#9787c5

Scan History

Scan history not available

Unable to load historical scan data