Security Scan Report: qishuidownload.com

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 2 domains to perform 5 HTTP transactions. The main domain is qishuidownload.com and was registered 1 month ago.

Submitted URL: https://qishuidownload.com/

Downloads:

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Analyst-vetted kit match and high-precision hunting-rule hit identify this new, unranked domain as a fake software download site serving payload archives from cloud storage — do not download anything.

Risk Factors (4)
Analyst-vetted malicious kit identification (cn-oss-fake-software-2026-11) — fake Chinese-language software download site
High-precision hunting-rule hit for fake-software OSS-archive download template
Recently registered (42-day-old) unranked domain
Page loads script from unranked third-party host byebyebaby.it.com contacted via sendBeacon
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'qishuidownload.com' on the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'qishuidownload' stretches across 14 characters split between 6 vowels and eight consonants. Tokenizing the label suggests three words: qi, shui, download. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://qishuidownload.com/

Page Load Overview

2.71s
Total Load Time
24 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
58.217.60.230Hong Kong, Hong Kong
AS45102Alibaba (US) Technology Co., Ltd.
51--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B611ED2A1EDB4F7A213A62BD2C3EDB2CB1EB1416A010C04059D5D418AE71AC68886688

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:kjZvVzeEnL7iuSxWOLqh4NLmULV9OULV98fCDV9okSV9UFVlXRWUn680nRa:CJIxZN6U37384fcqwUn64

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:944:AIAAAgAAAAAAAAAAAEQBAQAAAAgAAAIAgAAAAIAAAAAECkAQAAAAAARAAAAgAAAAAAAAAAAABAAAAQAAAAAAAAAAAACIAgIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data