ScanMalware.com

Security Scan Report: changeip.com

Submitted: Apr 5, 2026, 1:08:12 PMCompleted: Apr 5, 2026, 1:09:44 PMpubliccompleted
Loading additional data...

Summary

This website contacted 6 IPs in 1 country across 6 domains to perform 35 HTTP transactions. The main domain is changeip.com and was registered NaN years ago.

Submitted URL: https://changeip.com

The Cisco Umbrella rank of the primary domain is #167,974 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Site is confirmed malicious due to multiple primary domain Indicators of Compromise; avoid and report.

Risk Factors
Multiple primary domain Indicators of Compromise matches
Low Cisco Umbrella ranking (outside top 100k)
Dynamic domain classification (suspicious)
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

documentation technical

(53%)

Domain Information

You're looking at domain 'changeip.com' on the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'changeip' spans 8 characters holding 3 vowels versus 5 consonants. Breaking it apart gives two words: change, ip. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://changeip.com

Page Load Overview

4.49s
Total Load Time
58
HTTP Requests
8
Domains
2.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:3,835 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical53% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
53%
technology software
52%
blog personal website
47%
healthcare medical
33%
education learning
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13151.101.194.137United States
AS15169
9192.178.183.95United States
AS15169Google LLC
9142.251.14.97United States
AS15169Google LLC
9142.250.154.95United States
AS15169Google LLC
9192.178.183.94United States
AS15169Google LLC
9204.16.169.60United States
AS19557CHANGEIP COM
586--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10C731A70D0ED2C6FC54B4384A5F5382961BF7DBBC3E9860832BF935A2F19D82091926D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:toM+CO/nhTKtqfICjlcF7Tyqi8PXcEIV4u9NtJ9G1it//:n+v/9fI2lctTyMXI5JP/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:79546:iKCLCgE5Dc+EEAAQsxAQ3QFSABqjcoswkjAkAr0RStRUIlzQBFDjGkAXiAALgBWKkQWAA+NwwBBABQVC0huaCaEDoEIhJTkz

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003e3c381809ffff
Perceptual Hash:8256f52a696b2be2
Difference Hash:79fcc8d9f1f99f86
Wavelet Hash:003e3c381809ffff
Color Hash:#6ce0d6

Other Hashes

Crop Resistant:fce8c9f1f9fb8e86,23fcfce8e9d9f1f1,fefffffffffefeff

Scan History

Scan history not available

Unable to load historical scan data