ScanMalware.com

Security Scan Report: sdk-quickq.com.cn

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/525f9f70-6b6c-453b-b587-0201f0ac175cDomain and IP registration (RDAP)/api/v1/rdap/525f9f70-6b6c-453b-b587-0201f0ac175cHow often this domain was scanned/api/v1/domain/stats/sdk-quickq.com.cnScan history for this domain/api/v1/domain/history/sdk-quickq.com.cn?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 5 HTTP transactions. The main domain is sdk-quickq.com.cn and was registered 1 month ago.

Submitted URL: https://sdk-quickq.com.cn/

AI Security Verdict

High Risk

Confidence: 90%

8
Risk Score

Roster-anchored known kit: typosquat .com.cn page posing as the QuickQ VPN official download site, matching the CN fake-software download lure family (YARA confirmed). Do not download its client.

Risk Factors (5)
Identified as a known malicious fake-software download kit (cn-fake-software-seo-2026-10)
High-precision YARA rule CN_Fake_Software_Download_Lure_Marks matched the page body
Impersonation of the QuickQ VPN brand on a non-official, typosquat-style .com.cn domain
Promotes executable client downloads — the delivery vector for the kit's trojanized installers
Very new domain (33 days) with no reputation
Domain age information unavailable

Details

Page Title

QuickQ — QuickQ下载官网

Scan Type

public

Domain Name Analysis

Within the Chinese country-code top-level domain (.com.cn), 'sdk-quickq.com.cn' is registered while skipping any subdomain. The core label 'sdk-quickq' covers 10 characters with two vowels and seven consonants; it also includes 1 hyphen. Breaking it apart gives 3 words: sdk, quick, q. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sdk-quickq.com.cn/

Page Load Overview

3.70s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:2,551 chars
Detector Agreement:33%

Website Classification

Primary Category

technology software95% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
95%
government public service
93%
blog personal website
91%
phishing scam
90%
cryptocurrency blockchain
86%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
523.248.224.186United States
AS138415Yancy Limited
51--

Detected Technologies2

Nginx
40%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AED28367A6E32466686398D57B77474B33A4D503C006CA287BFD0688CFCED84AD93B0D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:uGSx+SUaa99+YjLQWFr9fKoEqoF5aXq8T1o:9XX+wFpKoEqoraXq8u

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30590:EICIW8DEFQKASsgQDRFkhkisGIACAUBIiGEASwyY8p1iI40jBHQACo8yEIAkNCAAAYBJsQCJ+iQAERcQiSsACoGQoRoITQmV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff001800000000ff
Perceptual Hash:9819e166f34accec
Difference Hash:7b1ab339a977f11b
Wavelet Hash:ff0e191d141019ff
Color Hash:#2dd24e

Other Hashes

Crop Resistant:7b1ab339a977f11b,5afab3b9a9a6f7f1

Scan History

Scan history not available

Unable to load historical scan data