ScanMalware.com

Security Scan Report: phreox.talk

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/662f30a0-6cdc-4c44-94a0-fef8888d0a1eDomain and IP registration (RDAP)/api/v1/rdap/662f30a0-6cdc-4c44-94a0-fef8888d0a1eHow often this domain was scanned/api/v1/domain/stats/phreox.talkScan history for this domain/api/v1/domain/history/phreox.talk?limit=15
This website contacted 1 IP in 1 country across 2 domains to perform 6 HTTP transactions. The main domain is phreox.talk and was registered 2 months ago.

Submitted URL: https://phreox.talk

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Self-branded Phreox sign-in page with its own username/password form; no impersonation, threat-intel, malware, IDS, or exfiltration evidence. Caution because the domain is unestablished/unknown-age.

Risk Factors (1)
Username/password sign-in form is present on a self-branded domain with no published registration age or established reputation.
Safety Factors (4)
Self-branding detected: page title and domain both use 'Phreox'.
No brand impersonation of a different entity detected.
No payment card fields or disguised password fields.
No Indicators of Compromise, hunting rule malware patterns, IDS alerts, or credential exfiltration behavior detected.
Domain age information unavailable

Details

Page Title

Phreox

Scan Type

public

Domain Name Analysis

Within the .talk top-level domain, 'phreox.talk' is registered and has no subdomain. Its registrable label 'phreox' stretches across 6 characters containing 2 vowels alongside four consonants. Tokenizing the label suggests 3 words: ph, re, ox. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://phreox.talk

Page Load Overview

2.70s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:100 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism41% confidence
Type: static
Method: ml+structural

All Detected Categories

news media journalism
41%
cryptocurrency blockchain
40%
technology software
35%
finance banking
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6193.111.249.254Frankfurt am Main, Hesse, Germany
AS49581Tube-Hosting
61--

Detected Technologies2

Nginx
50%
OpenResty
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DA5186A03150583F5323C2A471C77D5825D9C745C603AC6CB1AE91A82BDAFC1CC67BF8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:H9/XOX6lyFaNLxCX7dY1kPvZn7XAYe7fnEA7J7fnWGKrY94uMC9r5D9g7m:/yexi66lXbs/E0B/yY9J9r5D9g7m

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2465:EAAAEgAAAECBhAQgAAAAAQYCgAIgAAAFBABAEEAAAKAoABAAKAEgEAAEgICCMRAUCIIACQAAACAAUCAAAAAAAAgJAAkAAAIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:cc663399cc669999
Difference Hash:0008323232320c00
Wavelet Hash:000018183c3c3030
Color Hash:N/A

Other Hashes

Crop Resistant:0008323232320c00

Scan History

Scan history not available

Unable to load historical scan data