Security Scan Report: xp94.vip

Redirected to:
https://www.xp94.vip/#/
Site favicon
Submitted: Jul 13, 2026, 5:14:57 AMCompleted: Jul 13, 2026, 5:16:16 AMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is xp94.vip and was registered NaN years ago.

Submitted URL: https://xp94.vip/

Effective URL: https://www.xp94.vip/#/Redirected

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

New, unranked site with no malicious forms or indicators; treat as moderate risk.

Risk Factors
Newly registered domain
Unranked / low‑reputation domain
Safety Factors
No forms collecting credentials or payments
No malicious JavaScript or network activity detected
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

TB68

Scan Type

public

Language

🇹🇭

TH

(60% confidence)

Category

entertainment media

(69%)

Domain Information

The domain name 'xp94.vip' uses the .vip top-level domain while skipping any subdomain. Count 4 characters in 'xp94' holding zero vowels versus two consonants; it also includes two digits. Splitting it apart reveals two words: xp, 94. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xp94.vip/

Page Load Overview

10.94s
Total Load Time
286
HTTP Requests
5
Domains
20.3 MB
Total Size

Language Analysis

Primary Language

🇹🇭Thai
Code: th
Confidence:60%
Script:Unknown
Direction:ltr

Detection Details

Language Code:th
Detection Confidence:60%
Script Type:Unknown
HTML Lang Attribute:zh-CN
Text Length:1,968 chars
Detector Agreement:100%
Language mismatch: Declared as zh but detected as th

Website Classification

Primary Category

entertainment media69% confidence
Type: static
Method: ml+structural

All Detected Categories

entertainment media
69%
gambling betting
59%
adult content
46%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
143188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
143188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2862--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F044FA34D50378BF65238695347A3B146C76CE3AC35899E86B6839F0FB8ACE14633794

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:cseG6GJDZsSszsksVsLsMshsjs1sFs5sysls0sDs9sbIcm3HqvGHkHV3uqdGxjGB:TehgD76qvwqAYB

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:270432:OEgkDRIAEuSMDBAQgCMDUCRAgkgCIEQCIAE0IQtllKWuhpNIKGDUREDqE8wEECGBSE8lKAGBIjCYYgYxAiSAHRsgIKRmFqBI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003c3c3c3c1c0000
Perceptual Hash:ccce649b31317764
Difference Hash:b261233a71339696
Wavelet Hash:003c3c3c3c3c0000
Color Hash:#65783a

Scan History

Scan history not available

Unable to load historical scan data