ScanMalware.com

Security Scan Report: learn.xrpl.org

Site favicon
Submitted: May 19, 2026, 3:12:07 PMCompleted: May 19, 2026, 3:14:31 PMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 1 country across 4 domains to perform 60 HTTP transactions. The main domain is learn.xrpl.org and was registered NaN years ago.

Submitted URL: https://learn.xrpl.org/course/intro-to-the-xrpl/lesson/how-the-xrp-ledger-works/

The Cisco Umbrella rank of the primary domain is #941,120 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 88%

2
Risk Score

The site is an established educational portal for XRPL with no malicious indicators; low risk despite heavy JS obfuscation and low ranking.

Risk Factors
High JavaScript obfuscation score with many eval()/Function() calls
Low Cisco Umbrella ranking (941,120) for a brand‑related domain
Safety Factors
Long‑standing domain registration
Brand name aligns with domain (self‑branding)
Page type is an article (og:type="article")
No external credential exfiltration observed
No network IDS alerts
Domain age information unavailable

Details

Page Title

How the XRP Ledger works | XRP Learning Portal

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(74%)

Domain Information

Within the non-profit oriented generic top-level domain (.org), 'learn.xrpl.org' is registered; it also runs on subdomain 'learn'. The core label 'xrpl' covers 4 characters with zero vowels and four consonants. It segments into 3 words: x, r, pl. Median word length comes out to one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://learn.xrpl.org/course/intro-to-the-xrpl/lesson/how-the-xrp-ledger-works/

Page Load Overview

51.14s
Total Load Time
57
HTTP Requests
7
Domains
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:7,572 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software74% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
74%
cryptocurrency blockchain
71%
education learning
56%
documentation technical
52%
government public service
40%

Detected Features

Search
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1518.245.31.100United States
AS16509Amazon.com, Inc.
14104.18.1.22United States
AS13335Cloudflare, Inc.
1423.185.0.4United States
AS54113Fastly, Inc.
14142.250.154.97United States
AS15169Google LLC
574--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E1442AF33AC8527A436343CD93552A58B27EF26BF74549C9FB9C446C4B81A9C242386F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:3JsI11L+tkkRCVlECAC7foSMFuKfpGp/056dCitlJADDrXOXZ6:V11iKzlGiA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:257299:4gCtkcqMEAQ2E7xaSNEAnACFgAqKcMIFAAKITmAGgDCYQ8SEIeBIlgOcIAEgIgpSkQBwecCAEoQBmmGVGSEI6CYKsVAiQTgx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffff87970000
Perceptual Hash:bed341be61e0b838
Difference Hash:6d713b173f6d679b
Wavelet Hash:ffbf8fc783870000
Color Hash:#6e783a

Other Hashes

Crop Resistant:6d713b173f6d679b,1c30393939391959,92baaf2f474ddbfb,652525db93eb9303

Scan History

Scan history not available

Unable to load historical scan data