Security Report: api.453252.xyz - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7c2e4fb7-c3a0-4c7b-8622-8493bbc113ed Domain and IP registration (RDAP)/api/v1/rdap/7c2e4fb7-c3a0-4c7b-8622-8493bbc113edHow often this domain was scanned/api/v1/domain/stats/api.453252.xyz Scan history for this domain/api/v1/domain/history/api.453252.xyz?limit=15

This website contacted 4 IPs in 1 country across 3 domains to perform 38 HTTP transactions. The main domain is 453252.xyz and was registered 2 years 6 months ago.

Submitted URL: https://api.453252.xyz/

Effective URL:

https://api.453252.xyz/login.html

Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

Risk Score

Self-branded 'AIClient2API' login page on an obscure numeric .xyz subdomain with a password-only form. Suspicious shape but no impersonation, exfiltration, or threat-intel hits — moderate risk, not confirmed phishing.

Risk Factors (3)

Password field with no username field — consistent with credential-harvesting kits, though also common for admin/API-token panels

Obscure numeric subdomain on .xyz with no visible operator/ownership information beyond a product name

Safety Factors (5)

No Indicators of Compromise or threat-intelligence matches

No JavaScript malware/hunting-rule patterns and no known malicious kit identified

No cross-origin credential exfiltration or disguised password fields

No impersonation of a different brand — page displays its own 'AIClient2API' branding

Only a 1-form static login page with standard CDN script hosting

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: 1480259189

MD5: 00abcd17a50f6b44cfae409aa342b775

Domain Name Analysis

Domain 'api.453252.xyz' uses the open generic top-level domain (.xyz), featuring subdomain 'api'. Count 6 characters in '453252' with zero vowels and 0 consonants; it also includes 6 digits. Splitting it apart reveals 1 word: 453252. Expect 6 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.39s

Total Load Time

1.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN

Text Length:110 chars

Detector Agreement:100%

Language mismatch: Declared as zh-CN but detected as en

Website Classification

Primary Category

technology software63% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

63%

cryptocurrency blockchain

42%

government public service

40%

documentation technical

40%

healthcare medical

35%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	70.39.179.235	Los Angeles, California, United States	AS3257GTT Communications Inc.
9	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
38	4	-	-