Security Scan Report: xinlin.tw

Site favicon
Submitted: Completed: publiccompleted
This website contacted 17 IPs in 3 countries across 14 domains to perform 114 HTTP transactions. The main domain is xinlin.tw and was registered 4 years 5 months ago.

Submitted URL: https://xinlin.tw

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate-looking Taiwanese property-loan site that has been compromised and injected with a ClickFix/EtherHiding kit serving a fake Cloudflare 'Human Verification' Terminal overlay. Do not interact.

Risk Factors (6)
Known ClickFix/EtherHiding injection kit present on the page (analyst-vetted, critical)
Fake Cloudflare human-verification overlay instructing visitors to open Terminal and paste clipboard commands
Obfuscated JavaScript that hides command-and-control hosts and reads payload addresses from a smart contract
CRITICAL IDS alerts for EtherHiding exfiltration
Threat-intelligence hits on the primary domain and on third-party resources loaded by the page
WordPress contact-form site apparently compromised and serving injected malicious script
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the Taiwanese country-code top-level domain (.tw), 'xinlin.tw' is registered with no subdomain. Count 6 characters in 'xinlin' containing 2 vowels alongside four consonants. Splitting it apart reveals 3 words: x, in, lin. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xinlin.tw

Page Load Overview

19.33s
Total Load Time
19.5 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-TW
Text Length:4,218 chars
Detector Agreement:50%

Website Classification

Primary Category

government public service100% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
100%
real estate property
100%
blog personal website
100%
corporate business
100%
finance banking
100%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1843.254.17.27Taiwan
AS131149Yuan-Jhen Info., Co., Ltd
6142.251.20.97Google · CDNUnited States
AS15169Google LLC
674.125.29.95Google · CDNUnited States
AS15169Google LLC
6142.251.155.119Google · CDNUnited States
AS15169Google LLC
6104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6172.67.71.68Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.250.154.94Google · CDNUnited States
AS15169Google LLC
6104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6216.239.32.36Google · CDNUnited States
AS15169Google LLC
6178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
11417--

Detected Technologies17

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T123642A72A14C157E052386C690A1BF1974BFDE33DE1345EAF7FB01788BC8EE2215A256

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:kYukfoI1wvaHcm8sM2m8kPa+TmmHP/h7uVPemlnTKxd+C:PB1wvaHcm8xFZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:314741:yIDACyiBDzIVQBANCHrCQhplDUFJRZAilJmKwUkbCLiTYaoIpmdCkAAFoBkYYQAXAsEIAUwokJERkQNwAhlEKqBBGhDWhIUU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfcfc7c3ffffffff
Perceptual Hash:b83881cfc66666c7
Difference Hash:10101c3400000008
Wavelet Hash:3f0f03033030ff00
Color Hash:#931f3c

Other Hashes

Crop Resistant:10101c3400000008

Scan History

Scan history not available

Unable to load historical scan data