Security Scan Report: cdxupha.org

Redirected to:
https://2026-10-25.urldance.com/en?cdxupha.org
Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 4 countries across 8 domains to perform 20 HTTP transactions. The main domain is cdxupha.org and was registered 10 months ago.

Submitted URL: https://cdxupha.org/

Effective URL:
https://2026-10-25.urldance.com/en?cdxupha.org
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Rotating date-stamped subdomain presenting a password prompt through a disguised text field with Unicode obfuscation and DevTools blocking. No brand impersonation or malware, but the credential-capture shape warrants avoidance.

Risk Factors (6)
Disguised password field (type='text' with password placeholder) — CRITICAL form anomaly
Password field without any username or email field — credential harvesting pattern
Unicode confusion detected in form fields (evasion technique)
DevTools and right-click blocking combined with a password-collecting page
Unknown-age destination host on a rotating date-stamped subdomain pattern (urldance.com)
No discernible business identity, About, contact or legal information behind the password prompt
Domain age information unavailable

Details

Page Title

Latest @ Sites

Scan Type

public

Domain Name Analysis

Within the non-profit oriented generic top-level domain (.org), 'cdxupha.org' is registered while skipping any subdomain. The registrable portion 'cdxupha' spans 7 characters split between two vowels and five consonants. Breaking it apart gives three words: cd, xu, pha. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cdxupha.org/

Page Load Overview

0.81s
Total Load Time
117 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:x-default
Text Length:257 chars
Detector Agreement:100%
Language mismatch: Declared as x-default but detected as en

Website Classification

Primary Category

social media network84% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
84%
download file sharing
61%
news media journalism
57%
entertainment media
47%
technology software
47%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9156.225.108.42Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1156.225.108.43Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
143.174.247.36Singapore
1120.52.95.244China
AS133119China Unicom IP network
143.159.107.113Singapore
1183.240.98.228China
AS56040China Mobile communications corporation
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1156.225.108.41Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
1183.60.255.95China
AS4134Chinanet
2012--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15AD1F86AAAEA4D361367C1C914B6FB0DA6B6D40BDA4BC50871FC7AC01FCBFC14817A54

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:CdAnw8/0oYIiCoL+NNILUJtZjIQKs2gqIj:CdGYoT9bp2BIj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6198:UREIoYEjMAMIQBIUBAqKAkxAJAIGAWkAAAigEMAMSKQISFBUqIwagEhEAgRAA4wFYABJgULFTKIiEkMDB3AWgJAEOAgUJIWQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0009191b1f1f1f0f
Perceptual Hash:8c49337666cc9973
Difference Hash:cfb3b3b3b3b3b3ff
Wavelet Hash:01191b1b1f1f1f1f
Color Hash:#c3c587

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data