ScanMalware.com

Security Scan Report: tiktokcdn.com.domain.name

Redirected to:
https://qemow.com/go/3115960?subid1=domain.name
Submitted: Sep 27, 2026, 3:08:49 PMCompleted: Sep 27, 2026, 3:09:21 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/368dea43-944c-475b-bf53-dc02587aae75Domain and IP registration (RDAP)/api/v1/rdap/368dea43-944c-475b-bf53-dc02587aae75Certificate Transparency/api/v1/ct/qemow.comHow often this domain was scanned/api/v1/domain/stats/tiktokcdn.com.domain.nameScan history for this domain/api/v1/domain/history/tiktokcdn.com.domain.name?limit=15

This website contacted 19 IPs in 2 countries across 4 domains to perform 6 HTTP transactions. The main domain is qemow.com and was registered 6 months ago.

Submitted URL: https://tiktokcdn.com.domain.name

Effective URL:

https://qemow.com/go/3115960?subid1=domain.name
Redirected

The Cisco Umbrella rank of the primary domain is #70,118 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Hostname mimics TikTok's CDN and redirects to an unrelated tracking gateway (qemow.com) serving no real content. No credential or payment form, IoC, or malware detected, so risk is moderate rather than confirmed phishing.

Risk Factors (3)
Deceptive hostname impersonating TikTok CDN (tiktokcdn.com) on an unrelated registrable domain
Cross-domain redirect chain terminating on an unknown tracking gateway (qemow.com)
No identifiable site content or owner; hidden-field form directed entirely off-site
Safety Factors (5)
No Indicators of Compromise matched against the page or its loaded resources
No JavaScript malware / YARA patterns and no high-precision native YARA hits
No Google Safe Browsing or kit-roster threats
No credential, password, disguised-password or payment fields (0/0/0), so no phishing form is present
Three Suricata alerts are INFO-level generic JavaScript-obfuscator heuristics, explicitly informational unless corroborated
Domain age information unavailable

Details

Page Title

...

Scan Type

public

Domain Name Analysis

Within the .name top-level domain, 'tiktokcdn.com.domain.name' is registered; it also runs on subdomain 'tiktokcdn.com'. Its registrable label 'domain' stretches across 6 characters holding three vowels versus three consonants. It segments into one word: domain. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tiktokcdn.com.domain.name

Page Load Overview

0.49s
Total Load Time
39 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6185.38.109.203Czech Republic
AS60592Gransy s.r.o.
0173.239.53.20Czech Republic
AS14618Amazon.com, Inc.
03.164.163.91Czech Republic
AS396982Google LLC
0185.38.109.208Czech RepublicUnknown
0198.134.116.17Czech RepublicUnknown
0173.239.53.32Czech RepublicUnknown
0161.35.252.241Czech RepublicUnknown
0142.251.20.95Czech RepublicUnknown
0142.251.110.97Czech RepublicUnknown
02.21.20.133Czech RepublicUnknown
619--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B893B450F3D4684122879FBBFB1BFDD0E91A5C6978444C8BC4447FB86EAA226E6D0D31

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:VRKTVW5uaKDNH5v6CBCk+5IUgvCSR+/8ugo2f4AN05Tv3Bu7oM:VRKTV7v6CBNmIUupMQ4ANez3Bu7oM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:94073:MgwIAUsAoJCnUENGEgRgIQ8QASMIZAkGhCGGAccOayEAjSIgTKItEFMhPuIYlPQFRqQbLka0ACkYEKCWAExADoGAqCBAAEAe

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data