ScanMalware.com

Security Scan Report: ameriean-expiess.vip

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6f958891-e3dc-493a-ad43-611d43aca270Domain and IP registration (RDAP)/api/v1/rdap/6f958891-e3dc-493a-ad43-611d43aca270How often this domain was scanned/api/v1/domain/stats/ameriean-expiess.vipScan history for this domain/api/v1/domain/history/ameriean-expiess.vip?limit=15
This website contacted 5 IPs in 1 country across 4 domains to perform 14 HTTP transactions. The main domain is ameriean-expiess.vip and was registered 3 months ago.

Submitted URL: https://ameriean-expiess.vip/at

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Typosquatted 'American Express' domain on a young, unranked .vip host, with the real page hidden behind a bot wall. Classic phishing shape; do not enter any data.

Risk Factors (4)
Typosquatting/misspelled impersonation of the American Express brand in the hostname
Unranked domain claiming a major financial brand's identity
Content deliberately hidden behind a bot-protection challenge, preventing verification
Recently registered domain (80 days) on a cheap .vip TLD
Domain age information unavailable

Details

Page Title

Verify you are human

Scan Type

public

Domain Name Analysis

You're looking at domain 'ameriean-expiess.vip' on the .vip top-level domain with no subdomain. The core label 'ameriean-expiess' covers 16 characters split between 8 vowels and seven consonants; bonus characters include one hyphen. Tokenizing the label suggests five words: amerie, an, ex, pies, s. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

(_) Verify you are human cvovee Privacy - Help

Page Load Overview

0.20s
Total Load Time
487 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:32%
Script:Latin
Direction:ltr

Detection Details

Text Length:124 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software70% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
70%
documentation technical
68%
government public service
54%
cryptocurrency blockchain
50%
news media journalism
48%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6172.67.204.30Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.52.216Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2192.0.77.32San Francisco, California, United States
AS2635Automattic, Inc
2104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
145--

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T170A2D6C758B39072DC42A3FA1A9A31167D6110ABD562DDB87DCE05808FC552CA6F3AEC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:dSFcjlzslumallWzYgmty0wuxVxNL944AlAvnsTCC3gWkHK/r:0FcZtmallBw/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:22842:AFgKUMREYSroQar3YIk/WhLGIDggJQ8irUCEgEBBB4ghIECiyoORScwAihAR8gZQCYIArlwCBMQwEKCJSkLEFKAQ7oEadaQl

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffebebffffff
Perceptual Hash:e9989665699a9665
Difference Hash:0000245252240000
Wavelet Hash:0303030bcbf3f3f3
Color Hash:N/A

Other Hashes

Crop Resistant:0000245252240000

Scan History

Scan history not available

Unable to load historical scan data