ScanMalware.com

Security Scan Report: 54rr.win

Redirected to:
https://54rr.win/
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f835fc1d-66e1-4142-815e-758a1e36964eDomain and IP registration (RDAP)/api/v1/rdap/f835fc1d-66e1-4142-815e-758a1e36964eHow often this domain was scanned/api/v1/domain/stats/54rr.winScan history for this domain/api/v1/domain/history/54rr.win?limit=15
This website contacted 5 IPs in 3 countries across 5 domains to perform 88 HTTP transactions. The main domain is 54rr.win and was registered 7 months ago.

Submitted URL: http://54rr.win/

Effective URL:
https://54rr.win/
Redirected

AI Security Verdict

Low Risk

Confidence: 85%

2
Risk Score

Site is a brand‑new domain with no malicious indicators; low risk but monitor due to its recent registration.

Risk Factors (1)
Newly registered domain (2 days old)
Safety Factors (5)
No credential or payment forms
No malicious Indicators of Compromise
No known brand impersonation
No IDS alerts
JavaScript obfuscation likely due to standard minification
Domain age information unavailable

Details

Page Title

54rr19_Plataforma oficial de certificação.

Scan Type

public

Domain Name Analysis

Within the .win top-level domain, '54rr.win' is registered. The registrable portion '54rr' spans 4 characters with zero vowels and 2 consonants, plus two digits. Tokenizing the label suggests 2 words: 54, rr. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://54rr.win/

Page Load Overview

6.18s
Total Load Time
10.8 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:64%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:42 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as pt

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20188.114.97.3United States
AS13335Cloudflare, Inc.
17172.67.75.251China
AS24429Zhejiang Taobao Network Co.,Ltd
17104.21.10.109United States
AS13335Cloudflare, Inc.
17163.181.58.166Frankfurt am Main, Hesse, Germany
AS24429Zhejiang Taobao Network Co.,Ltd
17124.220.205.65Shanghai, Shanghai, China
AS45090Shenzhen Tencent Computer Systems Company Limited
885--

Detected Technologies1

X-UA-Compatible
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12284D765A059118ABA37CB66C2CC9A18563CE633C5530DEDB289341E8FC3F9933D7366

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:iq1ZmgcaqJDCfZbIRHzXsCC4yGnwuoomZIXWvIxIK:iq1ZaJDuIyGnwuSvIxIK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:374335:BSAgEKBIiBS+mhgpoEHASZAVwIBbINSQyAERAk6QUAYscElANpAAwDAI5geEyqAioAypA5JspggAUEBOuVgr+CUhQkCAoIuB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818181818181818
Perceptual Hash:99996666cc993333
Difference Hash:b2b2b2b2b2b2b2b2
Wavelet Hash:1b1b1b1b1b1b1b1b
Color Hash:#b56ce0

Other Hashes

Crop Resistant:9ee6a2baa6719286,b2b2b2b2b2b2b2b2

Scan History

Scan history not available

Unable to load historical scan data