Security Scan Report: encryptkhun-cmd.github.io

Redirected to:
https://encryptkhun-cmd.github.io/srwalt/index.html/
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 2 domains to perform 20 HTTP transactions. The main domain is github.io and was registered 13 years ago.

Submitted URL: https://encryptkhun-cmd.github.io/srwalt/

Effective URL:
https://encryptkhun-cmd.github.io/srwalt/index.html/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 85%

9
Risk Score

Fake TikTok coin-recharge page on a github.io subdomain: impersonates TikTok, promises ~35% off coins, and runs a sham payment flow with a fabricated '5,000 Coins sent' confirmation. Not affiliated with TikTok.

Risk Factors (5)
Impersonation of the TikTok brand on a domain not owned by TikTok
Deceptive discount coin/payment flow on a third-party GitHub Pages subdomain
Fake transaction confirmation and 'coins sent' claim
Unranked, instant-publish hosting subdomain with unknown actual creation date
Collects a username in a form while presenting a card payment panel
Domain age information unavailable

Details

Page Title

TikTok

Scan Type

public

Domain Name Analysis

The domain name 'encryptkhun-cmd.github.io' uses the British Indian Ocean Territory country-code top-level domain (.io) with subdomain 'encryptkhun-cmd'. Its registrable label 'github' stretches across 6 characters split between two vowels and 4 consonants. Breaking it apart gives 3 words: g, it, hub. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://encryptkhun-cmd.github.io/srwalt/

Page Load Overview

3.13s
Total Load Time
3.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:59%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:860 chars
Detector Agreement:67%
Language mismatch: Declared as es but detected as en

Website Classification

Primary Category

social media network74% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
74%
entertainment media
67%
finance banking
56%
cryptocurrency blockchain
47%
e-commerce shopping
47%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5185.199.109.153Fastly · CDNUnited States
AS54113Fastly, Inc.
3185.199.108.153Fastly · CDNUnited States
AS54113Fastly, Inc.
32.16.206.15Akamai · CDNHamburg, Free and Hanseatic City of Hamburg, Germany
AS20940Akamai International B.V.
3185.199.110.153Fastly · CDNUnited States
AS54113Fastly, Inc.
3185.199.111.153Fastly · CDNUnited States
AS54113Fastly, Inc.
32.16.206.4Akamai · CDNHamburg, Free and Hanseatic City of Hamburg, Germany
AS20940Akamai International B.V.
206--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C64362A6A6F304627943E4A57BE76B4A3364D103D10ACA693FDC13848FC7A949C7379C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:LfVF+TLrbV5OngT9po0ur9po0Ztgxbh6ncTo6LDn:hAf3BXbkXbUxbhtoSj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:58978:gACFIEmJRPIIgIimJmBFbEIgpaDMcEIAVCQxBUxKVQACxhk05NMCEikFLQIIIEFTPkSgAMoquRAREAEWEplCEgCQSyXAmFMV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bfdfc3c3dfdffffe
Perceptual Hash:b82fc79a29672139
Difference Hash:4bb89e96b0b04400
Wavelet Hash:a35f43435f5f0302
Color Hash:N/A

Other Hashes

Crop Resistant:4bb89e96b0b04400

Scan History

Scan history not available

Unable to load historical scan data