ScanMalware.com

Security Scan Report: americanexptty.s3jryxb.asia

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2f712e04-9e52-4451-9180-c843449aaeeeDomain and IP registration (RDAP)/api/v1/rdap/2f712e04-9e52-4451-9180-c843449aaeeeHow often this domain was scanned/api/v1/domain/stats/americanexptty.s3jryxb.asiaScan history for this domain/api/v1/domain/history/americanexptty.s3jryxb.asia?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is s3jryxb.asia and was registered 10 months ago.

Submitted URL: https://americanexptty.s3jryxb.asia/yxhZxla

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Bare 403 page on a lookalike 'americanexptty' host tucked under a random .asia domain — no forms or malware observed, but the deceptive hostname and total absence of legitimate content warrant caution.

Risk Factors (3)
Deceptive hostname resembling the American Express brand on a domain that is not American Express's official domain
No legitimate page content — the request returns a 403 error, consistent with bot/geo-gated or not-yet-populated abusive infrastructure
Unranked domain with essentially no legitimacy signals
Safety Factors (5)
No credential, login or payment forms on the page (verified DOM counts all zero)
No threat-intelligence Indicators of Compromise matched the page or its resources
No hunting rule malware patterns and no known malicious kit identified in the roster
No cross-origin form submissions or credential exfiltration detected
Domain is roughly 316 days old, which is outside the very-new registration window
Domain age information unavailable

Details

Page Title

403 Forbiddenother network

Scan Type

public

Domain Name Analysis

The domain 'americanexptty.s3jryxb.asia' uses the .asia top-level domain with subdomain 'americanexptty'. The registrable portion 's3jryxb' spans 7 characters with 0 vowels and 6 consonants, notching one digit. It segments into 5 words: s, 3, j, ry, xb. The median word length lands at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

403 Forbidden nginx/1.31.7

Page Load Overview

1.79s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🇩🇰Danish
Code: da
Confidence:72%
Script:Latin
Direction:ltr

Detection Details

Text Length:40 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
343.165.175.126Tokyo, Tokyo, Japan
AS132203Tencent Building, Kejizhongyi Avenue
31--

Detected Technologies2

Envoy
40%
Bootstrap
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T126D02257FF1FAC8CAA4326F009C73684C088C222C88688108B42028361C366FC4C3354

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:qzxUigso5vxEH9cS9NVuBLx0AqWDgs01lIgLPJINqz:kxRgso5OcE/Wx0Aqogs01lIgrWU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:1a06a3d7a74c3f293961ff91dad79641

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:e666666666666626
Difference Hash:0c00000000000000
Wavelet Hash:007fcfcf00000000
Color Hash:N/A

Other Hashes

Crop Resistant:0c00000000000000

Scan History

Scan history not available

Unable to load historical scan data