ScanMalware.com

Security Scan Report: www.qyzx581.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5acac2b2-b8ea-4372-8594-7961cb048b90Domain and IP registration (RDAP)/api/v1/rdap/5acac2b2-b8ea-4372-8594-7961cb048b90How often this domain was scanned/api/v1/domain/stats/qyzx581.comScan history for this domain/api/v1/domain/history/qyzx581.com?limit=15
This website contacted 2 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is qyzx581.com and was registered 5 years ago.

Submitted URL: https://www.qyzx581.com/?token=NtF0vMBUuMC1TwzZbezLvMCJTMCH52Aa

AI Security Verdict

Moderate Risk

Confidence: 58%

5
Risk Score

Unranked domain hosting a generic 'enterprise email' login with a suspension-notice lure. No brand impersonation, IoC, or exfiltration found; credential form plus phishing-style pretext warrant caution.

Risk Factors (3)
Credential-collecting login form on a low-reputation, unranked domain
Suspension/urgency pretext text displayed to users (classic phishing framing)
No verifiable organizational identity behind a generic 'enterprise mailbox' login
Safety Factors (5)
Domain is well established (approx. 5 years old, registered 2020-11-17)
No Indicators of Compromise matches for the page or its resources
No JavaScript malware / YARA patterns detected
No cross-origin credential exfiltration or suspicious JS network targets observed
No brand impersonation of a third party detected and no network IDS alerts
Domain age information unavailable

Details

Page Title

企业邮箱登录

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.qyzx581.com' is registered; it also runs on subdomain 'www'. The registrable portion 'qyzx581' spans 7 characters holding 0 vowels versus 4 consonants; it also includes three digits. Segmentation suggests 4 words: q, yz, x, 581. The median word length lands at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.qyzx581.com/?token=NtF0vMBUuMC1TwzZbezLvMCJTMCH52Aa

Page Load Overview

0.58s
Total Load Time
10 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:189 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical68% confidence
Type: webapp
Method: ml+structural

All Detected Categories

documentation technical
68%
corporate business
68%
technology software
36%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1104.21.62.86Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.222.34Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T169112F46EA44001DB4D64198FE66A2997BA680F0A15A0B2C7CC9D535C39DB28C9FF06C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hR/C0A4UVHrk+G93hI4S0qX46bv4pUjka:TcvN49x19iFwpUt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:867:ACAAAQAAIBhEAAAACAAAAAAAAIAAAAABAAAgAAAAAAAAAAAAAAACAAACAAAAAAAAAAAAAAAEAABAAAAAAEQwCAAAABAAAAEA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7fff7ffffffff
Perceptual Hash:b333332666cecc89
Difference Hash:0c1c100400000000
Wavelet Hash:04043c14f0f0f0f0
Color Hash:#b487c5

Other Hashes

Crop Resistant:0c1c100400000000

Scan History

Scan history not available

Unable to load historical scan data