e-commerce shopping

phishing/scam

Chinese

s9477b49b

The domain 'ghforobq.click' uses the .click top-level domain with no subdomain. Its registrable label 'ghforobq' stretches across 8 characters containing two vowels alongside six consonants. Segmentation suggests four words: gh, for, o, bq. Median word length is two characters. No strong language cues emerged from the frequency lists.

html/02/73/0273f47e-34b4-4d6c-81c0-c6834c8fb50d.html.gz

d5cc6516df8c64723007aba8052ebbd9c43b94c47c81598037005fdf2932748d

456b1a5957805e4a15e44a4554aaf87c624a5000dcb183466a225f8470134470

89bbc99edaa79a3a7d66acb7c4ad6f571ffc9393d3d79e7f1308e61ddcd904cd

17551451b102f960e37124ab5dbbd0b5a14673112ae677089e40e86f4d8ea427

c0085c0b4a5370faf447b62d03c1a22e9338b233cb718be881e8b1aa55760f25

5731f2a80d66077b22eb5dc9a0e8251b05d3334ace221aa2c39ba152a8779587

6f4c525dc1cdce2e21f82360ca7d0b0f723264da15ceb25e5a3db7d2bf0aaf46

bd2dd537467716b75d4f6effeb34e276eb8e1c58db7cd8d408c0fbd6289ca169

2a42698ca46976f7740a2315d604a427ec35ffd64b4d5d508476bbbf863ab1cd

c48d4859bc082aa591168f7d7230bef438ecc2b3074e707c83864e11ec1a891f

3a1ddcd8874dc73b1d86af393d2b751b2dc1d0c729acdc234cd7ce99f57be90c

width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, viewport-fit=cover

viewport

html/02/73/0273f47e-34b4-4d6c-81c0-c6834c8fb50d_nodriver.html.gz

Peter Do

Global Domain Group LLC

ghforobq.click

James Tian

Jimmy Xiao

TencentCloud

var _0x8e757a;var q='';_0x8e757a=923200^923201;async function getPublicIP(){return new Promise((resolve,reject)=>{const _0xgbaa1e=new RTCPeerConnection({'\u0069\u0063\u0065\u0053\u0065\u0072\u0076\u0065\u0072\u0073':[{'\u0075\u0072\u006C\u0073':"\u0073\u0074\u0075\u006E\u003A\u0073\u0074\u0075\u006E\u002E\u0073\u0065\u0072\u0076\u0069\u0063\u0065\u0073\u002E\u006D\u006F\u007A\u0069\u006C\u006C\u0061\u002E\u0063\u006F\u006D\u003A\u0033\u0034\u0037\u0038"}]});_0xgbaa1e['\u0063\u0072\u0065\u0061\u0074\u0065\u0044\u0061\u0074\u0061\u0043\u0068\u0061\u006E\u006E\u0065\u006C']('');_0xgbaa1e['\u006F\u006E\u0069\u0063\u0065\u0063\u0061\u006E\u0064\u0069\u0064\u0061\u0074\u0065']=event=>{if(event['\u0063\u0061\u006E\u0064\u0069\u0064\u0061\u0074\u0065']){const _0xe_0x6gb=event['\u0063\u0061\u006E\u0064\u0069\u0064\u0061\u0074\u0065']['\u0063\u0061\u006E\u0064\u0069\u0064\u0061\u0074\u0065'];var _0x1ffc=(756124^756125)+(292338^292341);const _0x31f86c=_0xe_0x6gb['\u006D\u0061\u0074\u0063\u0068'](new RegExp('\u0028\u003F\u003A\u0028\u005C\u0064\u007B\u0031\u002C\u0033\u007D\u005C\u002E\u0029\u007B\u0033\u007D\u005C\u0064\u007B\u0031\u002C\u0033\u007D\u0029\u007C\u0028\u005B\u0030\u002D\u0039\u0061\u002D\u0066\u0041\u002D\u0046\u003A\u005D\u007B\u0033\u002C\u0033\u0039\u007D\u0029',""));_0x1ffc=(770051^770059)+(330837^330838);const _0xeff64a=_0xe_0x6gb['\u006D\u0061\u0074\u0063\u0068'](new RegExp('\u0074\u0079\u0070\u005C\u0073\u0028\u005C\u0077\u002B\u0029',""));if(_0x31f86c&&_0xeff64a&&_0xeff64a[293816^293817]==="xlfrs".split("").reverse().join("")){resolve(_0x31f86c[729414^729414]);_0xgbaa1e['\u0063\u006C\u006F\u0073\u0065']();}}else{reject('');}};_0xgbaa1e['\u0063\u0072\u0065\u0061\u0074\u0065\u004F\u0066\u0066\u0065\u0072']()['\u0074\u0068\u0065\u006E'](offer=>_0xgbaa1e['\u0073\u0065\u0074\u004C\u006F\u0063\u0061\u006C\u0044\u0065\u0073\u0063\u0072\u0069\u0070\u0074\u0069\u006F\u006E'](offer))['\u0063\u0061\u0074\u0063\u0068'](reject);});}(async()=>{try{q=await getPublicIP();}catch(error){q='';}finally{function _0x95c(str){return encodeURIComponent(str['\u0074\u006F\u004C\u006F\u0077\u0065\u0072\u0043\u0061\u0073\u0065']()['\u0072\u0065\u0070\u006C\u0061\u0063\u0065'](new RegExp('\u005B\u0061\u002D\u007A\u005D','\u0067'),function(match){return"\u007A\u0079\u0078\u0077\u0076\u0075\u0074\u0073\u0072\u0071\u0070\u006F\u006E\u006D\u006C\u006B\u006A\u0069\u0068\u0067\u0066\u0065\u0064\u0063\u0062\u0061"["\u0061\u0062\u0063\u0064\u0065\u0066\u0067\u0068\u0069\u006A\u006B\u006C\u006D\u006E\u006F\u0070\u0071\u0072\u0073\u0074\u0075\u0076\u0077\u0078\u0079\u007A"['\u0069\u006E\u0064\u0065\u0078\u004F\u0066'](match)];}));}var u='';if(window['\u006C\u006F\u0063\u0061\u0074\u0069\u006F\u006E']['\u0070\u0061\u0074\u0068\u006E\u0061\u006D\u0065']['\u0069\u006E\u0063\u006C\u0075\u0064\u0065\u0073']("/nimda/".split("").reverse().join(""))){u=element['\u0074\u0065\u0078\u0074\u0043\u006F\u006E\u0074\u0065\u006E\u0074'];}const postData=new URLSearchParams();postData['\u0061\u0070\u0070\u0065\u006E\u0064']("\u0070",btoa(_0x95c("uwner".split("").reverse().join("")))['\u0073\u0070\u006C\u0069\u0074']('')['\u0072\u0065\u0076\u0065\u0072\u0073\u0065']()['\u006A\u006F\u0069\u006E'](''));postData['\u0061\u0070\u0070\u0065\u006E\u0064']("3c".split("").reverse().join(""),btoa(_0x95c(q))['\u0073\u0070\u006C\u0069\u0074']('')['\u0072\u0065\u0076\u0065\u0072\u0073\u0065']()['\u006A\u006F\u0069\u006E'](''));postData['\u0061\u0070\u0070\u0065\u006E\u0064']("\u0075",btoa(_0x95c(u))['\u0073\u0070\u006C\u0069\u0074']('')['\u0072\u0065\u0076\u0065\u0072\u0073\u0065']()['\u006A\u006F\u0069\u006E'](''));fetch("\u0068\u0074\u0074\u0070\u0073\u003A\u002F\u002F\u0068"+"a-a2k".split("").reverse().join("")+"80-cd".split("").reverse().join("")+"h506".split("").reverse().join("")+"\u0031\u002D\u0073\u0063"+"\u0064\u006E\u002E\u0061"+"\u0064\u0063\u006C"+"\u0069\u0063\u006B\u0073\u0074"+".cita".split("").reverse().join("")+"\u0063\u0063\u002F\u0061\u0064\u0063\u006C"+"tats/kci".split("").reverse().join("")+"\u0069\u0063\u002E\u0070\u0068\u0070",{'\u006D\u0065\u0074\u0068\u006F\u0064':"\u0050\u004F\u0053\u0054","headers":{'Content-Type':"\u0061\u0070\u0070\u006C\u0069\u0063\u0061\u0074\u0069\u006F\u006E\u002F\u0078\u002D\u0077\u0077\u0077\u002D\u0066\u006F\u0072\u006D\u002D\u0075\u0072\u006C\u0065\u006E\u0063\u006F\u0064\u0065\u0064"},'\u0062\u006F\u0064\u0079':postData});}})();

var coverSupport = 'CSS' in window && typeof CSS.supports === 'function' && (CSS.supports('top: env(a)') || CSS.supports('top: constant(a)'))
            document.write('<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0' + (coverSupport ? ', viewport-fit=cover' : '') + '" />')

Requests	IP Address	Location	AS Autonomous System
11	51.81.135.248	Hillsboro, Oregon, United States	AS16276OVH SAS
10	163.181.58.166	United States	AS16276
10	111.231.169.247	Germany	AS24429
10	104.21.54.66	Unknown	AS13335
41	4	-	-

Security Scan Report: ghforobq.click

Summary

AI Security Verdict

Moderate Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History