Security Scan Report: www.ylxd138.com

Submitted: Dec 12, 2025, 12:55:38 AMCompleted: Dec 12, 2025, 12:56:02 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 1 country across 1 domain to perform 6 HTTP transactions. The main domain is ylxd138.com and was registered NaN years ago.

Submitted URL: https://www.ylxd138.com/?token=nMTqxzU5szYv3ALnhqUfgzY9MAb

AI Security Verdict

High Risk

Confidence: 80%

7
Risk Score

Site likely used for credential harvesting; do not enter credentials.

Risk Factors
Hidden password field (potential credential harvesting)
Unranked domain with login form
Password field on a site with no known brand affiliation
Domain age information unavailable

Details

Page Title

申请中心

Scan Type

public

Language

🇨🇳

Chinese

(60% confidence)

Category

government public service

(75%)

Domain Information

Within the commercial generic top-level domain (.com), 'www.ylxd138.com' is registered with subdomain 'www'. The registrable portion 'ylxd138' spans 7 characters holding zero vowels versus 4 consonants; bonus characters include three digits. Segmentation suggests three words: yl, xd, 138. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.ylxd138.com/?token=nMTqxzU5szYv3ALnhqUfgzY9MAb

Page Load Overview

1.95s
Total Load Time
6
HTTP Requests
1
Domains
N/A
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Language Code:zh
Detection Confidence:60%
Script Type:Han
HTML Lang Attribute:zh-CN
Text Length:747 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service75% confidence
Type: webapp
Method: ml+structural

All Detected Categories

government public service
75%
corporate business
74%
documentation technical
72%
healthcare medical
71%
cryptocurrency blockchain
71%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1104.21.82.166United States
AS13335CLOUDFLARENET
1172.67.159.210United States
AS13335CLOUDFLARENET
12606:4700:3036::ac43:9fd2United States
AS13335CLOUDFLARENET
12606:4700:3036::6815:52a6United States
AS13335CLOUDFLARENET
64--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16DE2619665F309A2642BE4FA6FD7970636A49003C40DCD143FAC179C4F8ED81FA6378A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:ga/zlXHLdiiilv9mR/Q1KH3cIW0CX4yPUTh8rqZN2vlxpRJ3uuW59OAxsOd3wuJj:pXLeTiluWPOAxsI8u1YgOMLI5hv8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:31123:QsAXow4MQSIACgKAiAwkUwqQCSYBBqQCKzGGlSAAAgCABGCIkUijAfFAAGEQhQxmGMUADQoSnISAr0QxWNBEKBRQgBE8WheQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data