ScanMalware.com

Security Scan Report: rcbde.cn

Redirected to:
https://9kepx.csw8.stk0u.e7-ve7.vip:15868/#/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2ffd987f-6076-490d-962d-968d69dc764eDomain and IP registration (RDAP)/api/v1/rdap/2ffd987f-6076-490d-962d-968d69dc764eHow often this domain was scanned/api/v1/domain/stats/rcbde.cnScan history for this domain/api/v1/domain/history/rcbde.cn?limit=15
This website contacted 17 IPs in 6 countries across 12 domains to perform 29 HTTP transactions. The main domain is rcbde.cn and was registered 3 months ago.

Submitted URL: https://rcbde.cn

Effective URL:
https://9kepx.csw8.stk0u.e7-ve7.vip:15868/#/
Redirected

AI Security Verdict

Low Risk

Confidence: 76%

3
Risk Score

Unlicensed Chinese stock margin-financing promotion served from an 8-day-old domain that redirects to a disposable .vip host on port 15868, with hostile-domain IDS alerts. No forms, but a classic high-yield investment lure — avoid.

Risk Factors (6)
Unlicensed margin-financing / leveraged stock trading service promoted with app-download call to action
Redirect chain ends on a random-looking subdomain host on port 15868, unrelated to the entry domain
IDS alerts flag hostile .top domain traffic (2 HIGH severity)
Third-party script and resource hosts on .top/.vip domains unrelated to the site's stated brand
Noindex not set, but no corporate identity, license number, or regulatory disclosure anywhere on the page
Self-assessed trust claims ('funds are safe', 'bank-level risk control') without verifiable operator details
Safety Factors (6)
No credential, login, password or payment fields on the page (verified: 0 forms, 0 password fields, 0 payment fields)
No threat-intelligence Indicators of Compromise against the page or its resources
No hunting rule malware patterns and no native-hunting-rule-scanner hits
No JavaScript credential-exfiltration or obfuscation signals detected
No known phishing-kit roster match
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

炒股配资选-线上实盘炒股配资-国内股票炒股杠杆公司-十大炒股杠杆APP

Scan Type

public

Domain Name Analysis

The domain 'rcbde.cn' uses the Chinese country-code top-level domain (.cn). Count 5 characters in 'rcbde' containing 1 vowel alongside 4 consonants. Segmentation suggests 3 words: rc, b, de. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rcbde.cn

Page Load Overview

5.04s
Total Load Time
404 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:564 chars
Detector Agreement:50%

Website Classification

Primary Category

gambling betting100% confidence
Type: static
Method: ml+structural

All Detected Categories

gambling betting
100%
government public service
100%
news media journalism
100%
finance banking
100%
cryptocurrency blockchain
99%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1345.42.83.21United States
AS26658HT
1104.26.3.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.26.4.30Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1146.75.121.91Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
145.122.132.179Hong Kong
AS153494XRUI TECHNOLOGY LIMITED
1111.45.3.198China
AS9808China Mobile Communications Group Co., Ltd.
1174.35.84.74Meteverse · CDNPalermo, Sicily, Italy
AS54994Meteverse Limited.
1138.113.132.39Meteverse · CDNCanada
AS54994Meteverse Limited.
2917--

Detected Technologies5

Nginx
40%
HTTP/3
40%
HSTS
40%
Vue.js
30%
Tailwind CSS
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15852006130FA2A3B20D799A0A6549BDB5EA6D70BE51BC07632FC47815FCBC434C432B5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:+heULvI1AMG/3T71In9JWfav8JaK3iajZDtu:jULvI15bcpDtu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14235:CFlIAAoKABSXijWFQSvGiGUSgkEARFhSgqgSCkQsFoA45RBU0bqwI4gsACAoQQBwAAec2IAMEBE6goAVFgEALh0qKgfUyJPj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7f1f1f0f0fffffff
Perceptual Hash:9919e2e21d1ce6e3
Difference Hash:f0f0f0747080d0c0
Wavelet Hash:0e0e0e0e0f1f3f3e
Color Hash:N/A

Other Hashes

Crop Resistant:f0f0f0747080d0c0,fe7e0f0f0e0e1e0e

Scan History

Scan history not available

Unable to load historical scan data