Security Scan Report: distributions-xrpl.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 6 domains to perform 22 HTTP transactions. The main domain is distributions-xrpl.com and was registered 2 weeks ago.

Submitted URL: https://distributions-xrpl.com/rewards/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

5-day-old unranked domain impersonating Xaman and promoting a fake XRP 'allocation' with an email capture form. No seed/payment field seen, but brand impersonation makes it high-risk.

Risk Factors (4)
Brand impersonation of Xaman on a non-official, 5-day-old domain
Fake token allocation / airdrop solicitation using a real brand's name
Email collection form on a newly registered look-alike host
No established reputation or ranking for the domain
Domain age information unavailable

Details

Page Title

Cold Storage in Your Pocket | Xaman

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'distributions-xrpl.com' is registered without a subdomain. Count 18 characters in 'distributions-xrpl' with 5 vowels and twelve consonants; bonus characters include 1 hyphen. Breaking it apart gives 4 words: distributions, x, r, pl. Median word length comes out to 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://distributions-xrpl.com/rewards/

Page Load Overview

1.81s
Total Load Time
2.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,418 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software41% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
41%
documentation technical
38%
cryptocurrency blockchain
38%
download file sharing
35%
government public service
27%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2146.75.120.159Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
2142.251.14.119Google · CDNUnited States
AS15169Google LLC
276.76.21.21Aws · CLOUDWalnut, California, United States
AS16509Amazon.com, Inc.
2172.67.162.171Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.26.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.64.150.129Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.15.138Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2210--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FED2726255D32B73C006C7D4A53A2769B7221CAFDFF24564BDAF0B93DB8799A8703009

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:hRf+c9/B7t79TufAnD0/jUMWAtkSw4Kt8wUXJj+3I46XIxq:aYDEjUMWykSw3N+j+4FXIxq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28809:EDAwikQQCMKBEKHAXVdYdgBkAGAAFrhYDYJYQU4ihiIvACwWMuMaAjBUECHCFQw+BUekgyGhASBAYAiCoBCFCgoBgCusuM5I

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fbf3c3e7c3cbe7ff
Perceptual Hash:e565c9896333396c
Difference Hash:2a168e4c06960e0c
Wavelet Hash:c3c3c3c3c3c3c3c3
Color Hash:#2d8649

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data