Security Scan Report: ge5sg-zqaaa-aaaal-acxla-cai.icp0.io

Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 2 countries across 2 domains to perform 6 HTTP transactions. The main domain is icp0.io and was registered 4 years 2 months ago.

Submitted URL: https://ge5sg-zqaaa-aaaal-acxla-cai.icp0.io/

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Minimal DBank canister app with a numeric top-up/withdraw form only; no credential or payment fields, no impersonation, and no malware. Threat-intel hits are generic single-source abuse reputation.

Risk Factors (1)
Financial-style top-up/withdraw interface lacks authentication and ownership/contact details, so its purpose and trustworthiness are unclear.
Safety Factors (4)
No credential or payment fields; the form only uses numeric top-up and withdraw inputs.
No malicious JavaScript, hunting rule, IDS, or Safe Browsing evidence detected.
No brand impersonation or cross-origin credential submission observed.
All scripts were served from the site's own domain, with no third-party script hosts.
Domain age information unavailable

Details

Page Title

DBank

Scan Type

public

Domain Name Analysis

The domain 'ge5sg-zqaaa-aaaal-acxla-cai.icp0.io' uses the British Indian Ocean Territory country-code top-level domain (.io) and includes subdomain 'ge5sg-zqaaa-aaaal-acxla-cai'. Its registrable label 'icp0' stretches across 4 characters split between 1 vowel and 2 consonants; bonus characters include one digit. Tokenizing the label suggests 2 words: icp, 0. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ge5sg-zqaaa-aaaal-acxla-cai.icp0.io/

Page Load Overview

0.54s
Total Load Time
127 KB
Total Size

Language Analysis

Primary Language

πŸ‡ΊπŸ‡ΈEnglish
Code: en
Confidence:70%
Script:Latin
Direction:ltr

Detection Details

Text Length:64 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking86% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
86%
healthcare medical
47%
cryptocurrency blockchain
39%
government public service
36%
adult content
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3212.71.124.188Langnau am Albis, Zurich, Switzerland
AS24951EveryWare AG
3195.5.171.242United States
AS398485DFINITY USA Research, LLC
62--

Detected Technologies1

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1580165A8F836844AC6021EB178F2A60E24CBA208D7319C6C50E9627F03DAE459934FCC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:qTjxntQA2WglLBDyQNVPYKCKOzlQ+WsGCPYFeVlgUV8QgqrVl1T88VIWyplwnXa:0jAAZmLM+VQ0OLJPYFKrXgqB7DIAXa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:748:AAAAAAAAAkAgAAAIFQAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAABAAAKAAAAAAAAAEAAAAAAIAQQAAQAAAAQAAAAAAAIAABAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818181800000000
Perceptual Hash:cccd33333398cc66
Difference Hash:3232b2b20c100000
Wavelet Hash:3f3f3f3f00000000
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data