Security Scan Report: imghaxor.io

Redirected to:
https://imghaxor.io/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 13 HTTP transactions. The main domain is imghaxor.io and was registered 8 months ago.

Submitted URL: https://imghaxor.io/

Effective URL:
https://imghaxor.io/login
Redirected

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Self-hosted Chevereto image-hosting login page with its own same-origin sign-in form and no impersonation, exfiltration or malware evidence; only an unverified abuse-reputation tag and unranked status, so low risk.

Risk Factors (2)
Domain is unranked in Cisco Umbrella and registered ~8 months ago — weak prior only, not evidence of wrongdoing
Login page on a low-reputation host, but with no corroborating phishing indicator
Safety Factors (4)
Chevereto is a legitimate open-source image hosting application; 'Powered by Chevereto' is a software attribution, not a claimed third-party brand
Credential form posts to its own origin with no external exfiltration or disguised fields
No JavaScript malware patterns, no obfuscated exfiltration sink, no third-party script hosts
No network IDS alerts and no Safe Browsing/malware indicators
Domain age information unavailable

Details

Page Title

Sign in - Chevereto

Scan Type

public

Domain Name Analysis

You're looking at domain 'imghaxor.io' on the British Indian Ocean Territory country-code top-level domain (.io) with no subdomain. The registrable portion 'imghaxor' spans 8 characters holding 3 vowels versus 5 consonants. Breaking it apart gives 3 words: img, ha, xor. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

9) Sign in with your account Usemame or Email address Password c+] Forgot password? Powered by CHEUCREOY

Page Load Overview

1.17s
Total Load Time
484 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:467 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network57% confidence
Type: webapp
Method: ml+structural

All Detected Categories

social media network
57%
technology software
40%
documentation technical
35%
news media journalism
33%
download file sharing
32%

Detected Features

Login Form
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
132--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T188E24F00304BADBD5B2B56C67BDB5A0BB17DB663D809B848F8DD64E40FD4DD831AB901

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:QHg+wVX5KoCv9UcNCtFFt0n1ZnknyZnkJGaQb/Ms9vmzXr4AJzC/DW7D6AdusdZa:T+LoCv9UxPQZnkyZnkJd/YeezD/Nj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:32808:CaFTlAqAKQkKkT8jAigUEiJCAJSE8IegQMlyVQlMxgIBhyLMIQeMByyBIVDJyMGKiOWARsBEAAAKp0hDBFYYUCIdQoRRIgRE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:131313383c7c4c4c
Perceptual Hash:882c3747986d779a
Difference Hash:3676f6f1f1c8d89c
Wavelet Hash:1313337d7c6c6c4c
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data