ScanMalware.com

Security Scan Report: 5654d0c0.ciirii.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b43b3333-44fe-4f5c-805e-22b91684a9b9Domain and IP registration (RDAP)/api/v1/rdap/b43b3333-44fe-4f5c-805e-22b91684a9b9How often this domain was scanned/api/v1/domain/stats/5654d0c0.ciirii.comScan history for this domain/api/v1/domain/history/5654d0c0.ciirii.com?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is ciirii.com and was registered 4 years 6 months ago.

Submitted URL: https://5654d0c0.ciirii.com

AI Security Verdict

Moderate Risk

Confidence: 65%

4
Risk Score

Bare hostname-only page; no forms or malware observed, but a HIGH Spamhaus DROP IDS alert raises risk to moderate.

Risk Factors (2)
Network IDS HIGH alert for Spamhaus DROP-listed traffic
Bare hostname-only page with no substantive legitimate content
Safety Factors (5)
No credential or payment forms present
No JavaScript malware or obfuscation signals detected
No threat-intelligence matches against the page or loaded resources
No brand impersonation or external form submissions observed
Verdict names no specific threat, and DOM analysis found no password field (real or disguised) or payment field and no other hard signal — elevated score unsupported; risk adjusted from 4 to 4
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain '5654d0c0.ciirii.com' on the commercial generic top-level domain (.com) with subdomain '5654d0c0'. The core label 'ciirii' covers 6 characters with four vowels and 2 consonants. Breaking it apart gives 3 words: ci, iri, i. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

5654d0c0.ciirii.com

Page Load Overview

2.46s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

Text Length:19 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2194.38.22.42Dnipro, Dnipropetrovsk Oblast, Ukraine
AS48693Rices Privately owned enterprise
21--

Detected Technologies2

Ubuntu
40%
Apache HTTP Serverv2.4.58
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T141A022FEC000000FBCA033E00CC203880C088280BCC0CC0A0080A02888080028C032C0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3:qVZxQXbZ6iMGIIKS46cz:qzxO96F3z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:290f7985e8d60ec31076182f5a41118b

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fff7fffffffffff
Perceptual Hash:870f0f0f0f0f0f0f
Difference Hash:c000800000000000
Wavelet Hash:30f0f0f0f0f0f0f0
Color Hash:N/A

Other Hashes

Crop Resistant:c000800000000000

Scan History

Scan history not available

Unable to load historical scan data