ScanMalware.com

Security Scan Report: 91-earring-pg.vip

Redirected to: https://91-earring-pg.vip/

Submitted: Mar 17, 2026, 6:00:38 PMCompleted: Mar 17, 2026, 6:02:21 PMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 2 countries across 5 domains to perform 193 HTTP transactions. The main domain is 91-earring-pg.vip and was registered NaN years ago.

Submitted URL: http://91-earring-pg.vip/

Effective URL: https://91-earring-pg.vip/Redirected

AI Security Verdict

Moderate Risk

Confidence: 70%

5
Risk Score

New site with heavily obfuscated script but no clear malicious indicators; treat as moderate risk.

Risk Factors
Domain age less than 7 days (critical new domain)
Highly obfuscated JavaScript (critical score)
Safety Factors
No credential or payment forms detected
No malicious Indicators of Compromise matches
No JavaScript malware YARA patterns detected
No network IDS alerts
HTTPS connection (assumed from final URL)
Domain age information unavailable

Details

Page Title

EARRINGPG

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

Within the .vip top-level domain, '91-earring-pg.vip' is registered with no subdomain. Count 13 characters in '91-earring-pg' containing 3 vowels alongside six consonants, along with 2 digits and 2 hyphens. Tokenizing the label suggests 3 words: 91, earring, pg. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://91-earring-pg.vip/

Page Load Overview

4.80s
Total Load Time
138
HTTP Requests
5
Domains
262 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:9 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
30106.54.228.253United States
AS45090
27104.18.30.47United States
AS13335Cloudflare, Inc.
27104.26.2.168United States
AS13335Cloudflare, Inc.
27163.181.58.166Frankfurt am Main, Hesse, Germany
AS24429Zhejiang Taobao Network Co.,Ltd
27172.67.210.80United States
AS13335Cloudflare, Inc.
1385--

Detected Technologies1

X-UA-Compatible
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T135441832E60D2065B633C865A5C4E74C6169F623C6530E9EF686392D8EC7BD723B3748

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:Hq1ZmgcaqJDCf1LmxuH/CXrrZrWnwUIQyT:Hq1ZaJDSmRWnwUIQyT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:278416:auXJSAgIEAwkDnBBQgMZsLRMk2cgIM3JejUIAEwWmikQLCAggZXjFKBZpSEQEACNAA4xRAWAgEBak7EAGQAYTCgoolRCMGZt

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818181818181818
Perceptual Hash:9876999966669999
Difference Hash:3232323232323232
Wavelet Hash:1b1b1b1b1b1b1b1b
Color Hash:#87c589

Other Hashes

Crop Resistant:0000400505200000,0101010101010101,0000000000000000

Scan History

Scan history not available

Unable to load historical scan data