ScanMalware.com

Security Scan Report: co.jp.ae12f37e8e943d072a609e83d604de2c52463e51.ph

Redirected to:
http://ww1.ae12f37e8e943d072a609e83d604de2c52463e51.ph/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7d6e382a-da9f-4ae4-abe0-e0ee579ab570Domain and IP registration (RDAP)/api/v1/rdap/7d6e382a-da9f-4ae4-abe0-e0ee579ab570How often this domain was scanned/api/v1/domain/stats/co.jp.ae12f37e8e943d072a609e83d604de2c52463e51.phScan history for this domain/api/v1/domain/history/co.jp.ae12f37e8e943d072a609e83d604de2c52463e51.ph?limit=15
This website contacted 28 IPs in 5 countries across 10 domains to perform 21 HTTP transactions. The main domain is ae12f37e8e943d072a609e83d604de2c52463e51.ph.

Submitted URL: https://co.jp.ae12f37e8e943d072a609e83d604de2c52463e51.ph/

Effective URL:
http://ww1.ae12f37e8e943d072a609e83d604de2c52463e51.ph/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Randomized .ph host with co.jp-lookalike subdomain, redirect, and generic keyword/ad doorway content. No forms or malware indicators; suspicious SEO redirect, not confirmed phishing.

Risk Factors (4)
Randomized hex hostname with a co.jp-lookalike subdomain prefix
Redirect from co.jp subdomain to ww1 subdomain
Minimal 'Loading...' page with keyword-stuffed related-search content
Ad and gambling-related external domains on a generic security-keyword page
Safety Factors (5)
No credential or payment forms
No Indicators of Compromise matches
No JavaScript malware or hunting-rule patterns
No network IDS alerts
No cross-origin credential exfiltration detected
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'co.jp.ae12f37e8e943d072a609e83d604de2c52463e51.ph' uses the Philippine country-code top-level domain (.ph) with subdomain 'co.jp'. The second-level label 'ae12f37e8e943d072a609e83d604de2c52463e51' is 40 characters long containing 8 vowels alongside 5 consonants; bonus characters include 27 digits. Splitting it apart reveals 23 words: a, e, 12, f, 37, e, 8, e, 943, d, 072, a, 609, e, 83, d, 604, de, 2, c, 52463, e, 51. Median word length is 1 character. No strong language cues emerged from the frequency lists.

Screenshot

‘ae12f37e8e943d072a609e83d604de2c52463e51"ph Related Searches) EFFICIENTjDATA ENCRYPTION > SERVICES CLOUD, DATA'SECURITY;SOLUTION > OPTIONS SECURE! PASSWORD, MANAGEMENT > SOLUTION SECURITY;MANAG...

Page Load Overview

3.06s
Total Load Time
281 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:72%
Script:Latin
Direction:ltr

Detection Details

Text Length:44 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software64% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
64%
blog personal website
47%
documentation technical
45%
government public service
41%
adult content
36%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21172.93.103.102Piscataway, New Jersey, United States
AS23470ReliableSite.Net LLC
0198.134.116.17Garden City, New York, United States
AS27257Webair Internet Development Company Inc.
0104.18.21.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
085.184.96.0Malta
AS47171Kindred IP Limited
0104.18.43.104Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0192.178.183.95Google · CDNUnited States
AS15169Google LLC
0172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.19.147.8Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.20.95Google · CDNUnited States
AS15169Google LLC
0104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2128--

Detected Technologies3

Erlang
50%
Cowboy
40%
Onsen UI
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FDE2B5150AF2042155962035DE7EAE8937765A23744CEC087D8CAA40FFAD9BB4DF6BF0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:+ZBsjBjrAyhtbgt4MiIO/5/9SLaIZgnhArmFWv3IQAGdfWv3IQAGdDQNGG:aMMvZgAaFg3IQAGBg3IQAGxq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:33451:gCwZSSEBph7QcykDBSAeCRGQCQRAoMKJgxQU0jJwJEGQkQtBAIsAECVwKcTcNoEAJCgIZLFRgwERErJgAgC8IuMSBhJAFk4K

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0042c300000000ff
Perceptual Hash:b4649b4a9b4eba26
Difference Hash:69969696b2b2b23b
Wavelet Hash:18e7ffdb001800ff
Color Hash:N/A

Other Hashes

Crop Resistant:616113273b198110,6996969696b2b2b2

Scan History

Scan history not available

Unable to load historical scan data