ScanMalware.com

Security Scan Report: readimacr-biz.ipns.dweb.link

Redirected to: https://readimacr-biz.ipns.dweb.link/#1spixeQZdGOahM6PGBcap7qC9cuhjF&Sat-Oct-25-2025-22:18:29-GMT+0000-(Coordinated-Universal-Time)&ZASomq5Yn5H=K4Q&(Coordinated,Universal,Time)&te-eHfT5lYJ6wn=YnwPdPwZM1Kytfg$$1WK5v9w@dP5g70W7CvIo&owpHRJC#

Submitted: Oct 25, 2025, 10:17:59 PMCompleted: Oct 25, 2025, 10:18:56 PMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 2 countries across 2 domains to perform 10 HTTP transactions. The main domain is readimacr-biz.ipns.dweb.link.

Submitted URL: https://readimacr-biz.ipns.dweb.link/

Effective URL: https://readimacr-biz.ipns.dweb.link/#1spixeQZdGOahM6PGBcap7qC9cuhjF&Sat-Oct-25-2025-22:18:29-GMT+0000-(Coordinated-Universal-Time)&ZASomq5Yn5H=K4Q&(Coordinated,Universal,Time)&te-eHfT5lYJ6wn=YnwPdPwZM1Kytfg$$1WK5v9w@dP5g70W7CvIo&owpHRJC#Redirected

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Site likely phishing for credentials; avoid and report

Risk Factors
Credential harvesting form on a newly observed, unranked domain
Hidden password input field
Password field without clear username association
Suspicious URL structure with encoded fragments
Domain age information unavailable

Details

Page Title

ウェブメール | 管理者

Scan Type

public

Language

🇯🇵

Japanese

(50% confidence)

Category

adult content

(53%)

Domain Information

Domain 'readimacr-biz.ipns.dweb.link' uses the .link top-level domain; it also runs on subdomain 'readimacr-biz.ipns'. Count 4 characters in 'dweb' with 1 vowel and 3 consonants. Tokenizing the label suggests 2 words: d, web. Expect 2 characters per word on average. The linguistic tilt is Catalan for 'd'. You will also see it in Breton and Chinese (Zhuyin) contexts. Net impression: Catalan phrase.

Screenshot

Security scan screenshot of https://readimacr-biz.ipns.dweb.link/

Page Load Overview

26.72s
Total Load Time
10
HTTP Requests
2
Domains
111 KB
Total Size

Language Analysis

Primary Language

🇯🇵Japanese
Code: ja
Confidence:50%
Script:Mixed
Direction:ltr

Detection Details

Language Code:ja
Detection Confidence:50%
Script Type:Mixed
Text Length:139 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content53% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

adult content
53%
phishing scam
45%
government public service
36%
documentation technical
31%
news media journalism
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2209.94.90.3United States
AS40680PROTOCOL
2133.20.97.160Japan
AS2907Research Organization of Information and Systems, National Institute of Informatics
22602:fea2:2::2United States
AS40680PROTOCOL
22602:fea2:2::3United States
AS40680PROTOCOL
2209.94.90.2United States
AS40680PROTOCOL
105--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18222E97A19518D1103434797B86B99C5C32B092EEC976F0FD1ACBEB8E9CD90DE983934

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:YQJM632w22w4TEIfSMsovLr9rQ1lKKPRiJewgHitgoi4St3v9Ru:ZyDIfZLr9rAhwhVi4Gv9Ru

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10111:EElA0CsBAxPkoGYZiIjECADUOAAgCeKA3EigmRAkCBJoSBiDCgHNWZJAOYNdKLqEDOAhJgMSOiCyiKATYk0lW0HEMBAxqREA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc3c3e7ffffffff
Perceptual Hash:b333cccccc993331
Difference Hash:000d4d0c00000000
Wavelet Hash:ffc3c3c300000000
Color Hash:#9479d2

Other Hashes

Crop Resistant:000d4d0c00000000

Scan History

Scan history not available

Unable to load historical scan data