Security Scan Report: www.ylxd138.com

Submitted: Dec 12, 2025, 4:04:14 PMCompleted: Dec 12, 2025, 4:05:50 PMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 1 country across 1 domain to perform 6 HTTP transactions. The main domain is ylxd138.com and was registered NaN years ago.

Submitted URL: https://www.ylxd138.com/?token=sxbT92yUigzULwyT9gzajhAa

AI Security Verdict

High Risk

Confidence: 78%

6
Risk Score

Site likely phishing for credentials; avoid and report.

Risk Factors
Hidden password field (credential harvesting technique)
Password collection on a low‑reputation, unranked domain
Domain age information unavailable

Details

Page Title

申请中心

Scan Type

public

Language

🇨🇳

Chinese

(60% confidence)

Category

government public service

(70%)

Domain Information

The domain name 'www.ylxd138.com' uses the commercial generic top-level domain (.com) with subdomain 'www'. The core label 'ylxd138' covers 7 characters with zero vowels and 4 consonants; bonus characters include 3 digits. Word splitting yields three words: yl, xd, 138. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.ylxd138.com/?token=sxbT92yUigzULwyT9gzajhAa

Page Load Overview

69.44s
Total Load Time
6
HTTP Requests
1
Domains
N/A
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Language Code:zh
Detection Confidence:60%
Script Type:Han
HTML Lang Attribute:zh-CN
Text Length:735 chars
Detector Agreement:50%

Website Classification

Primary Category

government public service70% confidence
Type: webapp
Method: ml+structural

All Detected Categories

government public service
70%
documentation technical
68%
corporate business
63%
technology software
63%
cryptocurrency blockchain
61%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.21.82.166United States
AS13335CLOUDFLARENET
1172.67.159.210United States
AS13335CLOUDFLARENET
12606:4700:3036::6815:52a6United States
AS13335CLOUDFLARENET
12606:4700:3036::ac43:9fd2United States
AS13335CLOUDFLARENET
64--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DCD2509665F309A2642BE4FA6FE7970636A49003C40DCD143FAC179C4F8AD81EA63789

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:ga/zlXHLdiiilv9mR/Q1KH3cIW0CX4yPUTh8rqZN2vlxpRJgzqjKqh6Xw5LJg4LA:pXLeTilzqmqhw8fL1Ygufw71X/ehMu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:31081:ohp32ksABjVmsyHArAwEdaeGAFGRADyALxOKA0VMwAQABBQKNAADQQhaBAaC8AAoO4IlSoMAFjSlTrTVAAxqzCZFgBgRC/hE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data