Security Scan Report: 302.r3dir.me

Redirected to: http://localhost:21/

Submitted: Jan 13, 2026, 1:26:47 PMCompleted: Jan 13, 2026, 1:31:49 PMpubliccompleted
Loading additional data...

Summary

This website contacted 0 IPs in 0 countries across 2 domains to perform 3 HTTP transactions. The main domain is localhost.

Submitted URL: https://302.r3dir.me/--to/?url=http://localhost:21

Effective URL: http://localhost:21/Redirected

AI Security Verdict

High Risk

Confidence: 82%

7
Risk Score

The site redirects to a localhost address on an unsafe port, indicating a likely malicious redirect.

Risk Factors
Redirect to localhost on an unsafe port
Unranked, newly observed domain
Potential URL manipulation / malicious redirect
Domain age information unavailable

Details

Page Title

localhost

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

documentation technical

(58%)

Domain Information

The domain name '302.r3dir.me' uses the Montenegrin country-code top-level domain (.me) and includes subdomain '302'. The second-level label 'r3dir' is 5 characters long containing one vowel alongside three consonants; it also includes one digit. It segments into 3 words: r, 3, dir. Median word length comes out to 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://302.r3dir.me/--to/?url=http://localhost:21

Page Load Overview

5.62s
Total Load Time
3
HTTP Requests
2
Domains
N/A
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:286 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical58% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
58%
adult content
53%
news media journalism
52%
government public service
49%
healthcare medical
45%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10F048E77329A063986558498F05B43099F20B143F506C9BCB9BCBAD9BFDED06107BB78

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:0fQho9PKBb9Js3q9Jzbs6tlg3SBKwdQWgceIszb2bMy8Old/:nhoC9JSqzzbs6o3Sj3gcrsf2eAt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:184401:ACARJWUeRGRQgAaFKaJbRIQQkBSkDiwC9EAgEgFSVDKobHWAgBSsBtCAAvMVOSwRgOZhAVIkGANAIkxbPYzIYRAFqhPEl4sA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc7cfffffffff
Perceptual Hash:b331cccccc663333
Difference Hash:00180c1000000000
Wavelet Hash:3f1f030f00000000
Color Hash:#6ce0da

Other Hashes

Crop Resistant:00180c1000000000

Scan History

Scan history not available

Unable to load historical scan data