ScanMalware.com

Security Scan Report: ch0392.xyz

Redirected to:
https://fp7.992kp618.com:7443/index.html
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/65619c17-91dc-42b3-871b-06dcb72469b8Domain and IP registration (RDAP)/api/v1/rdap/65619c17-91dc-42b3-871b-06dcb72469b8How often this domain was scanned/api/v1/domain/stats/ch0392.xyzScan history for this domain/api/v1/domain/history/ch0392.xyz?limit=15
This website contacted 20 IPs in 2 countries across 10 domains to perform 80 HTTP transactions. The main domain is ch0392.xyz and was registered 4 years 3 months ago.

Submitted URL: https://ch0392.xyz/

Effective URL:
https://fp7.992kp618.com:7443/index.html
Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

4
Risk Score

Adult video portal on a self-branded, unranked host with no forms or malware hits; only concern is advertised mirror-domain rotation to evade blocking. No phishing or payment risk observed.

Risk Factors (3)
Site actively advertises rotating mirror domains and 'anti-block' email addresses, indicating deliberate block evasion
Adult content behind a bare 18+ click-through, on an unranked, very recently registered entry domain
Entry domain ch0392.xyz (23 days old) redirects to an unrelated registrable domain (992kp618.com), so its age/reputation cannot vouch for the destination
Safety Factors (4)
No credential, login or payment form anywhere on the page
No malware, phishing or exploit indicators in threat intel, hunting rule or the kit roster
Page brand '992kp' matches its own final hostname — no impersonation of another brand
Content is entertainment/adult media, not financial, government or retail impersonation
Domain age information unavailable

Details

Page Title

992kp快樂看片

Scan Type

public

Domain Name Analysis

You're looking at domain 'ch0392.xyz' on the open generic top-level domain (.xyz) and has no subdomain. Count 6 characters in 'ch0392' containing zero vowels alongside 2 consonants, plus four digits. It segments into two words: ch, 0392. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

BATU (Se — HED ERT) ¢ https://fp2.992kp617.com:7443 AB TRA, Aiwlsmia TEA !

Page Load Overview

0.95s
Total Load Time
6.8 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:146 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media90% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
90%
adult content
53%
social media network
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.247.0.5United States
AS40065CNSERVERS LLC
423.224.179.35United States
AS40065CNSERVERS LLC
4172.247.250.236United States
AS40065CNSERVERS LLC
423.225.98.35United States
AS40065CNSERVERS LLC
423.224.179.181United States
AS40065CNSERVERS LLC
423.225.91.220Los Angeles, California, United States
AS40065CNSERVERS LLC
423.224.132.86United States
AS40065CNSERVERS LLC
423.225.159.122United States
AS40065CNSERVERS LLC
423.224.132.12United States
AS40065CNSERVERS LLC
443.152.43.117Singapore
AS139341ACE
8020--

Detected Technologies6

X-UA-Compatible
100%
JQueryv2.1.0
100%
Nginx
50%
OpenResty
40%
HSTS
40%
Google Analytics
35%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15FC3BFB4B33CEFA8A4CA1D45B9390C58D0AC2C0E4707CADE7E4C61F91BDD9969A37506

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Fqb28P7EAhRlIbeBIF6CNr40sVTNFH/cU7EAhRlIbeBIF6CNr40sVTNFH/w9IFR:Fqy8DEMRdBCN80sVNNE+EMRdBCN80sVR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:122409:kEIVHKThxIUTETAYGCKEBEEA4HBRQKSowkgJgBgMB1fQSpECKgYAiikUKJkDWAMygMMEaAZSpiCBKkgIx6sJZyDgELhESAmC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181838007e7e
Perceptual Hash:883dc03773c63fc1
Difference Hash:35353131690dd4d4
Wavelet Hash:011939393d017f7f
Color Hash:N/A

Other Hashes

Crop Resistant:cbcbcbcbcbcbc3c4,554f5a636165236d,0000000000000000,66e2eae2eae8e660,31303030680dd0d0

Scan History

Scan history not available

Unable to load historical scan data