Security Report: gray-kxii-prod.gtv-cdn.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5231af6f-1c6a-4200-a370-d5c877bc7c9c Domain and IP registration (RDAP)/api/v1/rdap/5231af6f-1c6a-4200-a370-d5c877bc7c9cHow often this domain was scanned/api/v1/domain/stats/gray-kxii-prod.gtv-cdn.com Scan history for this domain/api/v1/domain/history/gray-kxii-prod.gtv-cdn.com?limit=15

This website contacted 1 IP in 1 country across 56 domains to perform 349 HTTP transactions. The main domain is gtv-cdn.com and was registered 4 years 8 months ago.

Submitted URL: https://gray-kxii-prod.gtv-cdn.com

The Cisco Umbrella rank of the primary domain is #19,390 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 80%

Risk Score

The site mimics the KXII brand but lacks credential collection; treat as moderate risk.

Risk Factors (3)

Brand impersonation (brand name in meta tags does not match domain)

High JavaScript obfuscation score (potentially suspicious code)

External advertising domains loaded (ad networks)

Safety Factors (4)

No credential or payment collection forms

No malicious IoC or YARA detections

Established domain age with no reputation hits

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

KXII | Texoma News, Weather, Sports | Texoma

Scan Type

public

Favicon Hash

MMH3: -1267684139

MD5: 142fb1f07dc3427f09fb51c9f983cc79

Domain Name Analysis

Domain 'gray-kxii-prod.gtv-cdn.com' uses the commercial generic top-level domain (.com) with subdomain 'gray-kxii-prod'. The core label 'gtv-cdn' covers 7 characters with zero vowels and six consonants; it also includes one hyphen. Segmentation suggests three words: gtv, cd, n. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

9.22s

Total Load Time

6.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:12,808 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service49% confidence

Type: static

Method: ml+structural

All Detected Categories

government public service

49%

adult content

43%

news media journalism

38%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
349	2.21.110.209	Hamburg, Free and Hanseatic City of Hamburg, Germany	AS20940Akamai International B.V.
349	1	-	-

Detected Technologies1

Google Tag Manager

30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T152E02B9FE003117FCF503ED95CA23205F9B5443165F996D99BC2E887C906EB5DE42512

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:qzxwyEr6VPWxxdGztA4XzGxFWggfoM4a4difgKKqz:kxVRpedgNwzgNZ4di4Kj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:b282d47c7f3a400ca7ed23820ff987a1

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f3fffffffffffff

Perceptual Hash:870707070707fdf9

Difference Hash:e040000000000000

Wavelet Hash:1030f0f0f0f0f0f0

Color Hash:#3a784e

Other Hashes

Crop Resistant:e040000000000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: gray-kxii-prod.gtv-cdn.com