Security Report: t2.trxduih.top - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f23c5d57-c841-48c3-890c-027f21a1e438 Domain and IP registration (RDAP)/api/v1/rdap/f23c5d57-c841-48c3-890c-027f21a1e438 Certificate Transparency/api/v1/ct/t2.trxduih.top How often this domain was scanned/api/v1/domain/stats/t2.trxduih.top Scan history for this domain/api/v1/domain/history/t2.trxduih.top?limit=15

This website contacted 19 IPs in 2 countries across 16 domains to perform 31 HTTP transactions. The main domain is t2.trxduih.top and was registered 18 years ago.

Submitted URL: https://t2.trxduih.top/

AI Security Verdict

Low Risk

Confidence: 62%

Risk Score

Unranked .top 'energy rental' page with 9 cross-domain redirects that asks users to send TRX to an anonymous address while disclaiming all responsibility. No credential forms or Indicators of Compromise, but the irreversible-payment lure makes it high risk.

Risk Factors (5)

Solicits irreversible crypto payment to an anonymous address with no verifiable service or refund mechanism

Unrealistically cheap energy offers used as bait

Nine cross-domain redirects

Operator pre-emptively disclaims responsibility for failed transfers

Unranked domain of unknown age with a random-looking .top hostname

Safety Factors (5)

No credential, login or payment-card forms present (verified form facts: 0 forms, 0 password fields)

No Indicators of Compromise matches for the page or its resources

No YARA/JavaScript malware patterns, no obfuscated script with network sink, no IDS alerts

No brand impersonation — the site does not present itself as another organisation

No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 3

Domain age information unavailable

Details

Page Title

0.1能量 · 全链查币 | Tab版other network

Scan Type

public

Domain Name Analysis

Within the .top top-level domain, 't2.trxduih.top' is registered with subdomain 't2'. The second-level label 'trxduih' is 7 characters long containing two vowels alongside five consonants. Segmentation suggests four words: tr, x, dui, h. Median word length comes out to 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.45s

Total Load Time

88 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:6,888 chars

Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain73% confidence

Type: static

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

73%

finance banking

59%

documentation technical

47%

healthcare medical

33%

adult content

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	18.163.180.205Aws · CLOUD	Hong Kong, Hong Kong	AS16509Amazon.com, Inc.
1	142.251.156.119Google · CDN	United States	AS15169Google LLC
1	142.251.20.99Google · CDN	United States	AS15169Google LLC
1	142.250.154.105Google · CDN	United States	AS15169Google LLC
1	142.250.154.104Google · CDN	United States	AS15169Google LLC
1	142.251.110.99Google · CDN	United States	AS15169Google LLC
1	142.251.153.119Google · CDN	United States	AS15169Google LLC
1	142.251.151.119Google · CDN	United States	AS15169Google LLC
1	142.251.157.119Google · CDN	United States	AS15169Google LLC
1	142.251.152.119Google · CDN	United States	AS15169Google LLC
31	19	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14D24193620921036501754D9727B770D31A6E68BCE03E5E4BBAC93640FCADEFE972A5C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:GKRQs5gKIiETG5JHqKpulqWSxihbbSpGsk4turN6eCc3z:G7suqfbWSxihXtZ6Lc3z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:228018:GCZIwApAAhCZYMaiBeIBBUIJSIiNCFciKAYiwDygMUQAkCDYXBpRgGGjQVoJABaCQjJNIlHkxiBE0ICVAEUCMYEIBAiAgQKE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7e7ffe7e7ffe7ff

Perceptual Hash:b333233333339933

Difference Hash:4c4c324c4c1a4c08

Wavelet Hash:c0c0d8c0e0e0c3fb

Color Hash:#d22d69

Other Hashes

Crop Resistant:4c4c324c4c1a4c08,ecedfcca2a20c0c0,41447822b2624841

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: t2.trxduih.top