Security Scan Report: www.china2uk.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 1 country across 9 domains to perform 82 HTTP transactions. The main domain is china2uk.com and was registered 5 years ago.

Submitted URL: https://www.china2uk.com

AI Security Verdict

Moderate Risk

Confidence: 60%

4
Risk Score

Established Chinese-UK forum with no forms, malware, or IoC hits, but hosts suspicious classified ads and uses eval(); treat cautiously.

Risk Factors (3)
Suspicious user-generated advertisements promoting deep-discount booking/electronics and part-time jobs
23 eval() calls in page JavaScript (dynamic code execution)
Domain not ranked in Cisco Umbrella top 1M (weak reputation signal)
Safety Factors (5)
Domain age over 5 years (established)
No credential or payment forms
No threat-intelligence matches, YARA malware, IDS alerts, or Safe Browsing hits
No cross-origin credential exfiltration detected
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 4
Domain age information unavailable

Details

Page Title

-英国华人论坛

Scan Type

public

Domain Name Analysis

The domain name 'www.china2uk.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www'. The second-level label 'china2uk' is 8 characters long holding three vowels versus four consonants; bonus characters include one digit. Segmentation suggests 3 words: china, 2, uk. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.china2uk.com

Page Load Overview

3.56s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:8,340 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog40% confidence
Type: static
Method: structural

All Detected Categories

news/blog
40%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14142.250.154.157Google · CDNUnited States
AS15169Google LLC
4104.21.20.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.20.132Google · CDNUnited States
AS15169Google LLC
4142.251.110.101Google · CDNUnited States
AS15169Google LLC
4192.178.183.95Google · CDNUnited States
AS15169Google LLC
4142.251.110.100Google · CDNUnited States
AS15169Google LLC
4172.67.194.100Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
4142.251.14.156Google · CDNUnited States
AS15169Google LLC
4142.251.20.156Google · CDNUnited States
AS15169Google LLC
8218--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1161386218EE55EFAC10266DC92E35F29DBD342F5CED71F817ABC1B898F9AD224503580

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:YY1OVqynluobjL4cPHmG4cDR6g4cf5+C4cZ1+K4cBp:YY1OVqCluobf4cvp4cVl4cxr4cjN4cP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:43598:EQslgSGYKNLiGAwQgwkxCPhYBKpRLhf5QNwPDJIOAUGRyksGZAyMUDmkGZVMCBBSCiiFGgUcwCMWQAJKAFDk0REYYEYbYgCY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0044b8b8b8383838
Perceptual Hash:9f3270708ececccc
Difference Hash:1e9c606262727272
Wavelet Hash:020339393939bdbd
Color Hash:#571f93

Other Hashes

Crop Resistant:1e9c606262727272

Scan History

Scan history not available

Unable to load historical scan data