ScanMalware.com

Security Scan Report: 1111capitals.com

Submitted: Mar 17, 2026, 8:36:21 PMCompleted: Mar 17, 2026, 8:37:42 PMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 1 country across 4 domains to perform 1 HTTP transaction. The main domain is 1111capitals.com and was registered NaN years ago.

Submitted URL: https://1111capitals.com/category/apparel/

AI Security Verdict

Confirmed Scam

Confidence: 90%

10
Risk Score

New domain with several password fields; classified as confirmed credential phishing.

Risk Factors
Brand‑new domain (<7 days) with credential‑collecting forms
Multiple password fields on a newly registered site
Lack of visible legitimate organizational content
Unranked domain (not in top 1 M sites)
Domain age information unavailable

Details

Page Title

Apparel – 1111 Capitals

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government public service

(43%)

Domain Information

The domain '1111capitals.com' uses the commercial generic top-level domain (.com) without a subdomain. Its registrable label '1111capitals' stretches across 12 characters containing three vowels alongside five consonants, plus 4 digits. Segmentation suggests two words: 1111, capitals. Expect six characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://1111capitals.com/category/apparel/

Page Load Overview

7.34s
Total Load Time
159
HTTP Requests
4
Domains
1.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:4,859 chars
Detector Agreement:75%

Website Classification

Primary Category

government public service43% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
43%
entertainment media
43%
e-commerce shopping
40%
adult content
40%
documentation technical
38%

Detected Features

Login Form
Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
42104.17.24.14United States
AS15169
39142.250.201.170United States
AS15169Google LLC
39142.251.127.94United States
AS15169Google LLC
39185.181.254.136Dallas, Texas, United States
AS36454WHG Hosting Services Ltd
1594--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1422439B278EC5832519747D69066361C79CA927BCF428A90BAFC8F28EFD2CC1755B14C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Hoge4kD2kJkxfki9c3i85yVzbrlIzB0AVOfW383aSUsok/rXjyVFrJ3b4Dk//sqO:bN+oe3i85UzbrlIzB02U+O02p

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:210670:MMEABQCEBkdDAZlYJRmmYwFAiJIXRqBKIUJRS0xaBnCgkQCorChEMAACABkSHDPhhoWmII4gIGkBEQqAGg2IhAYw4UISTIeC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff6ffc7c7838383
Perceptual Hash:bcc30c8cb3bfc892
Difference Hash:44a45b1f1e36363f
Wavelet Hash:ff00efc783838383
Color Hash:#79d27b

Other Hashes

Crop Resistant:44a45b1f1e36363f,0008313131310800,8e97113dd66b6b0f,1d093938785f6d2f

Scan History

Scan history not available

Unable to load historical scan data