Security Scan Report: red.xawrh.com

Submitted: Apr 14, 2026, 7:52:36 AMCompleted: Apr 14, 2026, 7:53:46 AMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is red.xawrh.com and was registered NaN years ago.

Submitted URL: https://red.xawrh.com/?token=jUF0vMBUuMC1TwzZbezLvMCJTMCH52Aa

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

Low risk site; login form present but no brand impersonation or malicious indicators detected.

Risk Factors
Unranked domain reputation
Presence of credential collection form on a non‑branded site
Safety Factors
Domain age > 1 year (well‑established)
No malicious IoC matches
No YARA malware detections
No network IDS alerts
Domain age information unavailable

Details

Page Title

验证处理中

Scan Type

public

Language

🇨🇳

Chinese

(60% confidence)

Category

documentation technical

(28%)

Domain Information

The domain 'red.xawrh.com' uses the commercial generic top-level domain (.com) and includes subdomain 'red'. The second-level label 'xawrh' is 5 characters long with one vowel and four consonants. Segmentation suggests three words: x, aw, rh. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://red.xawrh.com/?token=jUF0vMBUuMC1TwzZbezLvMCJTMCH52Aa

Page Load Overview

1.13s
Total Load Time
4
HTTP Requests
1
Domains
N/A
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Language Code:zh
Detection Confidence:60%
Script Type:Han
HTML Lang Attribute:cn
Text Length:270 chars
Detector Agreement:50%
Language mismatch: Declared as cn but detected as zh

Website Classification

Primary Category

documentation technical28% confidence
Type: webapp
Method: ml+structural

All Detected Categories

documentation technical
28%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2104.21.23.173United States
AS13335Cloudflare, Inc.
2172.67.212.111United States
AS13335Cloudflare, Inc.
42--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10C127457A2F324926867E9E66BDB075B37B0C107C10ECD143FDC62448F88E96EA52B4C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:AS1iPlOv7CMPZwq907npMy+RJMKKAozZwZ3TtN:hNRIZ+3r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9732:uqJFgAECFOgTGrhwEhE5tSUANA2FiBTtI0aaN4IYgUQAAIlgEMwBAaIgDiAMKUSZSXHgIA2s1VJEq1ADBCjQIyR38SYScipL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffcece0e0e0e0ff
Perceptual Hash:d6b6a869a96cbc12
Difference Hash:320c2c0000000000
Wavelet Hash:dfe4cce0c0c0c0ff
Color Hash:#79d2c2

Other Hashes

Crop Resistant:320c2c0000000000

Scan History

Scan history not available

Unable to load historical scan data