Security Scan Report: pekinshuho.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 3 domains to perform 41 HTTP transactions. The main domain is pekinshuho.com and was registered 25 years ago.

Submitted URL: https://pekinshuho.com/

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Aged but unranked domain impersonating imToken with 'official' wallet download claims, flagged as phishing by two corroborating threat feeds and loading a random .cc script host. Avoid; do not download wallets here. Reported to threat feeds.

Risk Factors (6)
Brand impersonation of imToken wallet on a non-official domain, advertising 'official' and 'genuine' wallet downloads
Primary domain listed as phishing by 2 corroborating threat-intelligence feeds
Random-string .cc third-party script host serving code to the page
HIGH IDS alert for .cc TLD DNS lookups
Claimed ICP registration / copyright of an unrelated media company (北京周报) in the footer
Auto-generated keyword-stuffed crypto spam content on an aged but repurposed host
Domain age information unavailable

Details

Page Title

imtoken钱包app下载-imtoken官网安卓版下载-imtoken钱包正版下载|以太坊和比特币通用钱包

Scan Type

public

Domain Name Analysis

The domain 'pekinshuho.com' uses the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'pekinshuho' stretches across 10 characters holding four vowels versus six consonants. Segmentation suggests four words: pek, in, shu, ho. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pekinshuho.com/

Page Load Overview

7.15s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:4,342 chars
Detector Agreement:50%

Website Classification

Primary Category

cryptocurrency blockchain97% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
97%
healthcare medical
97%
finance banking
92%
technology software
91%
phishing scam
77%

Detected Features

Search
OG: index

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2191.110.167.230United States
AS40065CNSERVERS LLC
2023.225.61.100United States
AS40065CNSERVERS LLC
412--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T163D3403214F21DE646CB8CC117E03A5A5A93CB0FCA9B95A4399C16C05FCBED3C90729E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:2oR6SmDkYWklADDItrsgJYBohnOapHFz3ftPg:RYWklADDItrsgmBohnOaps

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:134231:ggDRjRAV0buAgEEYHMBIwCIvZBhSEiFmTxMVAOAAAIgJF4XEEIVdALRDmCEXM8ARFoEwNM8rAQEJohKhAKJyBQGKEBgIlYAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:df9181f7ffc1cffb
Perceptual Hash:ec6c99c386936999
Difference Hash:3327330727131732
Wavelet Hash:958181f3bf818f8b
Color Hash:#3a6778

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data