Security Scan Report: hmym.rx989.com

Redirected to:
https://hmym.rx989.com/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 71 HTTP transactions. The main domain is rx989.com and was registered 7 months ago.

Submitted URL: https://hmym.rx989.com/

Effective URL:
https://hmym.rx989.com/login
Redirected

AI Security Verdict

Low Risk

Confidence: 68%

3
Risk Score

Self-branded login page for a claimed penetration-testing console; no impersonation, exfiltration, or threat-intel/hunting-rule hits. Only weak signals (unranked host, generic 'root' IDS alert), so low risk.

Risk Factors (2)
Generic IDS 'ATTACK_RESPONSE id check returned root' alert (potentially bad traffic), a weak signal commonly triggered by benign shell output text
Unranked hostname (subdomain hmym.rx989.com) with a low business-legitimacy score and no verifiable operator information on the login page
Safety Factors (5)
No Indicators of Compromise, hunting rule, kit-roster or Safe Browsing hits
Login form posts same-origin with no credential exfiltration and no third-party scripts
Self-branding only — no impersonation of another organisation's brand
Domain is roughly 7 months old (registered 224 days ago), with no obfuscated JavaScript or hidden fields
Page content is coherent with its stated purpose (penetration-testing console login), and the ML classifier reads it as technology-software documentation
Domain age information unavailable

Details

Page Title

ARTEX — 自主渗透测试控制台

Scan Type

public

Domain Name Analysis

The domain 'hmym.rx989.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'hmym'. The second-level label 'rx989' is 5 characters long holding zero vowels versus 2 consonants, along with three digits. Splitting it apart reveals three words: r, x, 989. Expect one character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hmym.rx989.com/

Page Load Overview

16.64s
Total Load Time
4.1 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:67 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as zh

Website Classification

Primary Category

technology software74% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
74%
documentation technical
72%
cryptocurrency blockchain
62%
phishing scam
46%
government public service
44%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
71202.79.168.26Singapore
AS152194CTG Server Limited
711--

Detected Technologies1

Nginxv1.14.1
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FB13A649BC08E6605C3BAD4D96BD5F398048B8728A318468F14EC98D8BD1FF627E5ED1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:UpamVXmge7sugkcoZh1V5x0rGV4xksc64Jysq7vFr+vz+v+BmAL1nNFyfB2LZF85:Zfebx/c64Jysq7vMvyvcmW1NFg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:42737:poBOOFgooh6mUIsBAIICggAxIwMQiEdBIQWRFUawiBQiEQWDgBCCQEdQeLQBQDySA224ARKE5wxBnE7g0aaRRKMWCzAEAQQJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f1f1f1f1f1f1f1f
Perceptual Hash:8c92976df0926f16
Difference Hash:747476f6f7777076
Wavelet Hash:1f1f1b1313111f1f
Color Hash:#535dac

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data