Security Report: listing-cwslhp.orbitrelaydata.cyou - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/554d66a2-849d-4de0-b8ff-1629da9a9292 Domain and IP registration (RDAP)/api/v1/rdap/554d66a2-849d-4de0-b8ff-1629da9a9292How often this domain was scanned/api/v1/domain/stats/listing-cwslhp.orbitrelaydata.cyou Scan history for this domain/api/v1/domain/history/listing-cwslhp.orbitrelaydata.cyou?limit=15

This website contacted 7 IPs in 1 country across 5 domains to perform 14 HTTP transactions. The main domain is orbitrelaydata.cyou and was registered 1 month ago.

Submitted URL: https://listing-cwslhp.orbitrelaydata.cyou/?ca=6UcW7QuUSMBzQ5126qmk7ZvCpnjykGURHPBxQXS5pDFV

AI Security Verdict

High Risk

Confidence: 76%

Risk Score

Six-day-old .cyou host running a fake token 'listing vote' with fabricated activity and a wallet-connect prompt plus phishing threat-intel; likely a crypto wallet drainer. Do not connect a wallet.

Risk Factors (7)

Domain age 6 days (CRITICAL, 3x multiplier)

Single-source phishing Indicator of Compromise on the primary domain

Wallet-connect prompt used as the sole user action on a token 'vote/points' page

Synthetic real-time voting feed with randomized wallet addresses

Obfuscated inline JavaScript (encoding/decoding + Function constructor)

Untrusted external domains (tokenadmin.lol, data-repo.cc)

Unranked/absent in Cisco Umbrella reputation

Domain age information unavailable

Details

Page Title

PONS – Pons · OrbitRelay

Scan Type

public

Domain Name Analysis

The domain 'listing-cwslhp.orbitrelaydata.cyou' uses the .cyou top-level domain and includes subdomain 'listing-cwslhp'. Its registrable label 'orbitrelaydata' stretches across 14 characters split between six vowels and 8 consonants. Breaking it apart gives 3 words: orbit, relay, data. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.70s

Total Load Time

437 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,669 chars

Detector Agreement:75%

Website Classification

Primary Category

cryptocurrency blockchain76% confidence

Type: static

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

76%

government public service

62%

gambling betting

59%

forum community discussion

57%

news media journalism

57%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.20.95Google · CDN	United States	AS15169Google LLC
2	104.21.46.58Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.168.29Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	192.178.183.94Google · CDN	United States	AS15169Google LLC
2	104.21.33.58Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	7	-	-