Security Scan: Welcome to nginx!

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f4cb5a13-bb9d-4cf7-a73b-3bcc4859bacc Domain and IP registration (RDAP)/api/v1/rdap/f4cb5a13-bb9d-4cf7-a73b-3bcc4859baccHow often this domain was scanned/api/v1/domain/stats/p.2137gang.store Scan history for this domain/api/v1/domain/history/p.2137gang.store?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is 2137gang.store and was registered 2 years ago.

Submitted URL: https://p.2137gang.store

AI Security Verdict

High Risk

Confidence: 70%

Risk Score

Default nginx placeholder on a domain flagged single-source as RedTail malware and linked to Spamhaus DROP traffic; no forms or content, but infrastructure reputation warrants avoiding interaction.

Risk Factors (2)

Domain flagged in threat intelligence as a named malware family (RedTail), albeit single-source and unverified

Spamhaus DROP listed traffic alert (IDS HIGH) indicating abuse-associated infrastructure

Domain age information unavailable

Details

Page Title

Welcome to nginx!

Scan Type

public

Domain Name Analysis

You're looking at domain 'p.2137gang.store' on the .store top-level domain, featuring subdomain 'p'. The second-level label '2137gang' is 8 characters long holding 1 vowel versus three consonants, along with 4 digits. Breaking it apart gives two words: 2137, gang. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.44s

Total Load Time

1 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:51%

Script:Latin

Direction:ltr

Detection Details

Text Length:291 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software32% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

32%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	94.154.43.208	Amsterdam, North Holland, Netherlands	AS219502Storm Industries LLC
2	1	-	-

Detected Technologies1

Nginx

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T152F0029BE3002227B48343013CB35A21775503E40354CB5578C74DD3EF2A913F4175B8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hYNp/ILjFBt0FSMpsvZJD64xxaboR1XKCf0ktEjo+Y/lNQd40UlNRVxWU+oQL:hYNpEF7D6GJ+tsvXD05oP/l8tUlj7W7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:615:AAQAAQAAAAAIAAAAAAACIAAAAAAAAAAAACAAAAAAAAAkAEAAAAQAAAAEAAAAAAAAAAAAAAAAQCAIAAKAAAAAEAAAAAAAAEAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7ffffffffffff

Perceptual Hash:b33333333389cccc

Difference Hash:1c1c000000000000

Wavelet Hash:07073f3f00000000

Color Hash:#721f93

Other Hashes

Crop Resistant:1c1c000000000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: p.2137gang.store