Security Scan Report: shitongyao.site

Submitted: Sep 17, 2026, 8:47:41 AMCompleted: Sep 17, 2026, 8:48:05 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Domain carries a single-source malware ('spynote') indicator on the primary domain while serving only a default nginx placeholder page — no legitimate content. Avoid interaction.

Risk Factors
Content-malware threat indicator (SpyNote malware family) associated with the primary domain itself
Placeholder/default nginx page with no real site content — consistent with infrastructure used for hosting or C2 rather than a legitimate site
Domain age information unavailable

Details

Page Title

Welcome to nginx!

Scan Type

public

Domain Name Analysis

Domain 'shitongyao.site' uses the .site top-level domain while skipping any subdomain. The second-level label 'shitongyao' is 10 characters long containing 4 vowels alongside 6 consonants. Tokenizing the label suggests three words: shi, tong, yao. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://shitongyao.site/

Page Load Overview

1.88s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:51%
Script:Latin
Direction:ltr

Detection Details

Text Length:291 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software33% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2149.248.18.18Los Angeles, California, United States
AS20473The Constant Company, LLC
21--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A7F00C5BE3822126B88353002CB626253B9403E60314CB1134CF0EC6DF1A612F517AA8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:haxnp/qwNFDvNbJw4xxaboR1XKCf0ktEjo+Y/lNQd30UlNRVxWUOj:haRpnjbJwtsvXD05oP/l8kUlj7Wbj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:609:AAAKAAEAAAAAgAAAQAAAAAARAAAAAAAAAAAAAAgAAABAAAAABAABAAAAAAAAAAAAAAAAAAAAAAAABAACAAAAEAABAIAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7ffffffffffff
Perceptual Hash:b33333333389cccc
Difference Hash:1c1c000000000000
Wavelet Hash:07073f3f00000000
Color Hash:#ac53a2

Other Hashes

Crop Resistant:1c1c000000000000

Scan History

Scan history not available

Unable to load historical scan data