Security Report: webapp.gofun.cc.cd - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/570edcf6-23ac-4353-b6f2-d0c29f098ca4 Domain and IP registration (RDAP)/api/v1/rdap/570edcf6-23ac-4353-b6f2-d0c29f098ca4How often this domain was scanned/api/v1/domain/stats/webapp.gofun.cc.cd Scan history for this domain/api/v1/domain/history/webapp.gofun.cc.cd?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 68 HTTP transactions. The main domain is cc.cd.

Submitted URL: https://webapp.gofun.cc.cd/

AI Security Verdict

High Risk

Confidence: 76%

Risk Score

Offensive-security C2/WebShell console ('JySecAI') on an unranked domain, carrying two single-source malicious threat-intel reports; treat as attack tooling and avoid.

Risk Factors (4)

Threat-intel reports (2, single-source unverified) flagging the primary and a related domain as malicious

Exposed C2 / WebShell / payload-generation and traffic-obfuscation functionality characteristic of attack infrastructure rather than a normal application

Modules for generating redirect/injection payloads against third-party endpoints

Unranked domain of unknown age hosting an unauthenticated-accessible offensive tooling panel

Domain age information unavailable

Details

Page Title

Jy 红队作战台 — JySecAI

Scan Type

public

Domain Name Analysis

You're looking at domain 'webapp.gofun.cc.cd' on the .cd country-code top-level domain with subdomain 'webapp.gofun'. Count 2 characters in 'cc' holding 0 vowels versus two consonants. Segmentation suggests one word: cc. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

90.18s

Total Load Time

433 KB

Total Size

Language Analysis

Primary Language

🇨🇳Chinese

Code: zh

Confidence:60%

Script:Han

Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN

Text Length:20,279 chars

Detector Agreement:67%

Website Classification

Primary Category

cryptocurrency blockchain80% confidence

Type: webapp

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

80%

government public service

73%

technology software

68%

documentation technical

64%

finance banking

56%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
34	104.21.30.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
34	172.67.150.39Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
68	2	-	-

Detected Technologies4

HSTS

40%

Cloudflare Bot Management

40%

Cloudflare

40%

Marked

20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T142E48324A4F41876419746CEA1A87F172AA4F307D69A0044B76E0BF04FD7CE2E91B97F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:qtI40uAfVkENjhsFarqTtyDMZIXVyWaMfx1fZ7GIo:UIvVkEhakriZIXVyWaMfxJZ7GIo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:683166:BDzAnAClAIQGEIiHAEUpBIBEhgkTAgFECAaIBDIHKqCMahHmQDoCEgBSREWOoXswgAUBQHAB3ohZqlEFggAoDYhUDwSIGgkA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:007f67c73f784212

Perceptual Hash:817a2b4a3e716c3e

Difference Hash:a1c58c8aa4f192f6

Wavelet Hash:007f674777794612

Color Hash:#6d2d86

Other Hashes

Crop Resistant:a1c58c8aa4f192f6

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: webapp.gofun.cc.cd