Security Scan Report: p.2137gang.shop

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is 2137gang.shop.

Submitted URL: https://p.2137gang.shop

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

Domain flagged as RedTail malware (single-source) and IDS blocklist alerts; page is default nginx. High-risk indicator, avoid interaction.

Risk Factors (4)
Primary domain has a content-malware IoC for RedTail (single-source, unverified)
Network IDS alerts for Spamhaus DROP and Dshield blocklists
Host IP is listed across multiple abuse-reputation feeds
Default nginx page with no legitimate web service
Domain age information unavailable

Details

Page Title

Welcome to nginx!

Scan Type

public

Domain Name Analysis

Domain 'p.2137gang.shop' uses the commerce-oriented generic top-level domain (.shop); it also runs on subdomain 'p'. The registrable portion '2137gang' spans 8 characters containing 1 vowel alongside 3 consonants, notching 4 digits. Splitting it apart reveals two words: 2137, gang. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://p.2137gang.shop

Page Load Overview

0.14s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:51%
Script:Latin
Direction:ltr

Detection Details

Text Length:291 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software33% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
294.154.43.208Amsterdam, North Holland, Netherlands
AS219502Storm Industries LLC
21--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T152F0029BE3002227B48343013CB35A21775503E40354CB5578C74DD3EF2A913F4175B8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hYNp/ILjFBt0FSMpsvZJD64xxaboR1XKCf0ktEjo+Y/lNQd40UlNRVxWU+oQL:hYNpEF7D6GJ+tsvXD05oP/l8tUlj7W7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:615:AAQAAQAAAAAIAAAAAAACIAAAAAAAAAAAACAAAAAAAAAkAEAAAAQAAAAEAAAAAAAAAAAAAAAAQCAIAAKAAAAAEAAAAAAAAEAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7ffffffffffff
Perceptual Hash:b33333333389cccc
Difference Hash:1c1c000000000000
Wavelet Hash:07073f3f00000000
Color Hash:#862d67

Other Hashes

Crop Resistant:1c1c000000000000

Scan History

Scan history not available

Unable to load historical scan data