ScanMalware.com

Security Scan Report: rabbit-whatapp.hl.cn

Redirected to:
https://hk.yahoo.com/?guccounter=1
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/65daec97-2bba-4713-a201-f2c44e257b99Domain and IP registration (RDAP)/api/v1/rdap/65daec97-2bba-4713-a201-f2c44e257b99How often this domain was scanned/api/v1/domain/stats/rabbit-whatapp.hl.cnScan history for this domain/api/v1/domain/history/rabbit-whatapp.hl.cn?limit=15
This website contacted 6 IPs in 3 countries across 13 domains to perform 16 HTTP transactions. The main domain is rabbit-whatapp.hl.cn and was registered 2 months ago.

Submitted URL: https://rabbit-whatapp.hl.cn/

Effective URL:
https://hk.yahoo.com/?guccounter=1
Redirected

AI Security Verdict

High Risk

Confidence: 84%

7
Risk Score

This site runs on disposable hosting and matches credential-stealing code signals — rated high risk on that basis.

Domain age information unavailable

Details

Page Title

Yahoo

Scan Type

public

Domain Name Analysis

Within the Chinese country-code top-level domain (.hl.cn), 'rabbit-whatapp.hl.cn' is registered while skipping any subdomain. The core label 'rabbit-whatapp' covers 14 characters split between four vowels and 9 consonants, notching 1 hyphen. Segmentation suggests three words: rabbit, what, app. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rabbit-whatapp.hl.cn/

Page Load Overview

2.03s
Total Load Time
203 KB
Total Size

Language Analysis

Primary Language

🇰🇷Korean
Code: ko
Confidence:59%
Script:Hangul
Direction:ltr

Detection Details

HTML Lang Attribute:zh-Hant-HK
Text Length:32,430 chars
Detector Agreement:100%
Language mismatch: Declared as zh-Hant-HK but detected as ko

Website Classification

Primary Category

healthcare medical74% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
74%
news media journalism
72%
finance banking
64%
blog personal website
63%
adult content
63%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
687.248.119.251United Kingdom
AS203220Yahoo-UK Limited
2179.61.182.48Hong Kong, Hong Kong
AS153656OWGELS INTERNATIONAL CO., LIMITED
23.248.116.94Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
254.247.145.118Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
287.248.119.252United Kingdom
AS203220Yahoo-UK Limited
2188.125.72.139Dublin, Leinster, Ireland
AS34010Yahoo-UK Limited
166--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A2A387C4C9BCE37C6E2B2D29E699731FE30FA505FF377668A021E49890C66E511E2D41

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:PKJkVJHY0NWgXpZi8BHxhDlqVY5V3hDlqV3JHY0NWgXpZi8BHSVFr21TbiNnsRp/:PKJkVJHY0NWgZZNRJzJsJHY0NWgZZNnD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:98051:TnCRUjBhLRMRCuQICFAeERQgkWCnAFjBsIILAkJBEVBEBEFZuYhAOBloiB4hggEBDiRB9wTBSJHgBKBg0nomcNQKEQDwOCAo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003c3c1c3c3c3c00
Perceptual Hash:9e616163651e3f49
Difference Hash:477979696969692e
Wavelet Hash:00bd3c3c3d3d3d01
Color Hash:#d2a779

Other Hashes

Crop Resistant:f2b0b6e2a6eeb6d6,477979696969692e

Scan History

Scan history not available

Unable to load historical scan data