ScanMalware.com

Security Scan Report: taxrefundid140712ok.siamsquareone.com

Redirected to:
https://xml-v4.pushub.net/click?i=n*FuoPewIio_0
Response type:Plain texttext/plainHTTP 200The server returned plain text, not a web page. The screenshot shows the text as a browser displays it.
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/806512a1-b3b5-4c0a-b6b9-dc5c129c3916Domain and IP registration (RDAP)/api/v1/rdap/806512a1-b3b5-4c0a-b6b9-dc5c129c3916How often this domain was scanned/api/v1/domain/stats/taxrefundid140712ok.siamsquareone.comScan history for this domain/api/v1/domain/history/taxrefundid140712ok.siamsquareone.com?limit=15
This website contacted 9 IPs in 2 countries across 4 domains to perform 12 HTTP transactions. The main domain is siamsquareone.com and was registered 12 years ago.

Submitted URL: https://taxrefundid140712ok.siamsquareone.com

Effective URL:
https://xml-v4.pushub.net/click?i=n*FuoPewIio_0
Redirected

AI Security Verdict

Moderate Risk

Confidence: 58%

4
Risk Score

Plain-text redirect stub: park-hosted lure-style subdomain bouncing to a third-party click/ad network. No forms, no branding, no malware — suspicious delivery chain, but no phishing or malware content observed.

Risk Factors (3)
Deceptive, tax-refund-themed subdomain label used to attract clicks on an unrelated parked domain
Cross-domain redirect to a third-party click/ad monetisation network with no disclosed destination
No genuine content served — plain-text redirect stub only
Safety Factors (4)
No credential, login, email or payment fields (0 forms, 0 password fields, 0 payment fields)
No JavaScript malware patterns, no native-hunting rule high-precision hits, no known-kit roster match
No network IDS alerts and no cross-origin credential exfiltration
Referenced third-party script hosts are all top-1M ranked (analytics, consent manager)
Domain age information unavailable

Details

Page Title

Redirecting...other network

Scan Type

public

Domain Name Analysis

The domain name 'taxrefundid140712ok.siamsquareone.com' uses the commercial generic top-level domain (.com), featuring subdomain 'taxrefundid140712ok'. The core label 'siamsquareone' covers 13 characters split between seven vowels and six consonants. It segments into three words: siam, square, one. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Loading ..

Page Load Overview

0.27s
Total Load Time
23 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:28 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4162.4.84.215Australia
AS154653ParkLogic Pty Ltd
1172.234.216.100Chicago, Illinois, United States
AS63949Akamai Connected Cloud
1198.134.116.17Garden City, New York, United States
AS27257Webair Internet Development Company Inc.
1198.134.116.30Garden City, New York, United States
AS27257Webair Internet Development Company Inc.
1173.239.53.32Garden City, New York, United States
AS27257Webair Internet Development Company Inc.
1161.35.252.241North Bergen, New Jersey, United States
AS14061DigitalOcean, LLC
1142.251.14.97Google · CDNUnited States
AS15169Google LLC
1216.239.32.36Google · CDNUnited States
AS15169Google LLC
1172.232.7.47Chicago, Illinois, United States
AS63949Akamai Connected Cloud
129--

Detected Technologies2

Nginx
50%
OpenResty
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B5C119B1B681B06D5BE610E6E27FA718653D0212390B4063B3ADFCA63C60D1F51A7E5A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:zGIG7Wbuu9gzJVd5pAJ9/4EEi2XHVCGICfM/0Cqa4oDtEFOuWRjff+7Bgo:6t7WbuuOzJVd5pAEE3aICfe08SFSjfO1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5612:FBEQAAMAWBAgoioEcyRWEcAAACgBQGYAJASSgUQKACAAIE5lADQYAQDEAEENQZAYABhEgASQBQEiLAIGAJAAQETEAYYCjCKI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data