Security Scan Report: r4.wickyhui.com

Submitted: Jan 16, 2026, 1:58:41 AMCompleted: Jan 16, 2026, 2:00:18 AMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is r4.wickyhui.com and was registered NaN years ago.

Submitted URL: https://r4.wickyhui.com/?token=ZJyT92yUigzULwyT9gzajhAa

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Potential credential‑harvesting phishing page; do not enter any credentials.

Risk Factors
Credential‑harvesting login form on an unranked domain
Hidden password field (type="password" with CSS display:none)
Garbage OCR text suggesting social‑engineering tactics
Unranked domain lacking established reputation
Domain age information unavailable

Details

Page Title

验证处理中

Scan Type

public

Language

🇨🇳

Chinese

(60% confidence)

Category

cryptocurrency blockchain

(91%)

Domain Information

Within the commercial generic top-level domain (.com), 'r4.wickyhui.com' is registered and includes subdomain 'r4'. Its registrable label 'wickyhui' stretches across 8 characters split between three vowels and 5 consonants. Splitting it apart reveals 3 words: wick, y, hui. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://r4.wickyhui.com/?token=ZJyT92yUigzULwyT9gzajhAa

Page Load Overview

1.26s
Total Load Time
4
HTTP Requests
1
Domains
N/A
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Language Code:zh
Detection Confidence:60%
Script Type:Han
HTML Lang Attribute:cn
Text Length:292 chars
Detector Agreement:50%
Language mismatch: Declared as cn but detected as zh

Website Classification

Primary Category

cryptocurrency blockchain91% confidence
Type: webapp
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
91%
finance banking
66%
documentation technical
63%
government public service
59%
technology software
56%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2104.21.37.59United States
AS13335CLOUDFLARENET
2172.67.205.1United States
AS13335CLOUDFLARENET
42--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F912746762F700966827E9E61BDB479A37A4C207C10ECC247FDC62448FCCD96EA52B4C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:AS1iPlOv7CMPZwq907npMy+RJMA2AmgZwZ3TtN:hNTNZ+3r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9748:Og5lxIECFOADAuBBGk1/sSUAJqWHABDlYU8ZJYIUhFAIAIFgE0wAiIIgDipeKRCBAWHgIAUg1lJM6NoCBSiAQQRTkyYa+mJL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffcece0e0e0e0ff
Perceptual Hash:d6b6a869a96cbc12
Difference Hash:320c2c0000000000
Wavelet Hash:dfe4cce0c0c0c0ff
Color Hash:#d279b2

Other Hashes

Crop Resistant:320c2c0000000000

Scan History

Scan history not available

Unable to load historical scan data