Security Scan Report: xhamsterxx.com

Redirected to:
https://www.wowxxx.to/
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 3 countries across 10 domains to perform 134 HTTP transactions. The main domain is xhamsterxx.com and was registered 1 month ago.

Submitted URL: https://xhamsterxx.com/

Effective URL:
https://www.wowxxx.to/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

ClickFix malware page posing as xHamster: hunting rule/kit-roster-confirmed BuildCard kit shows a fake Windows Security 'repair' prompt that gets visitors to paste and run an MSI-downloading command. Do not interact.

Risk Factors (5)
Known malicious ClickFix kit identified by hunting rule and the analyst-vetted kit roster
Fake Windows Security / device-repair overlay instructing users to paste and run a terminal command
Brand impersonation of xHamster on domains that are not xhamster.com
Cross-domain circular redirect chain
Cloaking: datacenter scanners get a block/challenge page while residential clients get the payload page
Domain age information unavailable

Details

Page Title

Free Porn Videos & XXX Movies: Sex Videos Tube | xHamster

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'xhamsterxx.com' is registered. Its registrable label 'xhamsterxx' stretches across 10 characters with 2 vowels and 8 consonants. It segments into three words: x, hamster, xx. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

HAMSTER (18+ We use cookies to provide the best experience for you on xHamster Ifyou choos will al s and data to: +, Show personalized content O Show recommended videos, based on your activity tle...

Page Load Overview

0.38s
Total Load Time
4.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,410 chars
Detector Agreement:75%

Website Classification

Primary Category

adult content54% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
54%
entertainment media
46%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13195.63.132.135Amsterdam, North Holland, Netherlands
AS216071Servers Tech Fzco
1137.77.150.214Russia
AS198953Proton66 OOO
11104.21.79.107Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11172.67.145.23Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11142.251.20.97Google · CDNUnited States
AS15169Google LLC
1187.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
11153.52.255.127United StatesUnknown
11216.239.32.36Google · CDNUnited States
AS15169Google LLC
11188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1177.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
13412--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A2735C3565BA2469042361567A46363A30BF802FBF16D0C87E5CC9285FCE95BC53BBEC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:RylbawSzXIYjxHemakJ310ynFmNCIWxlB77yFh6S:RWAmNCfB72v6S

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:75744:Q0BIQMC2CXwKogkFEBBgISiBBogitQ1LFDKAesRFKgwfhEgIg0GIwrMQgmyAAGGAGFAqQIWEAIeE2ISCDRf4BEsKOigQmENU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000183818180000
Perceptual Hash:c88d37769dd8c868
Difference Hash:e827333333312d32
Wavelet Hash:7e8098b898fc80ff
Color Hash:07e00000000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data