Security Scan Report: 999qq.com.pk

Redirected to:
https://999qq.com.pk/wp-login.php?redirect_to=https%3A%2F%2F999qq.com....
Submitted: Oct 14, 2026, 9:41:10 AMCompleted: Oct 14, 2026, 9:42:02 AMpubliccompleted

This website contacted 4 IPs in 2 countries across 4 domains to perform 24 HTTP transactions. The main domain is 999qq.com.pk and was registered 19 years ago.

Submitted URL: https://999qq.com.pk/wp-admin/

Effective URL:

https://999qq.com.pk/wp-login.php?redirect_to=https%3A%2F%2F999qq.com....
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

A 9-day-old, unranked domain serving a standard WordPress login page behind a reCAPTCHA check. No threat-intel, YARA, IDS, exfiltration or impersonation signals; risk is limited to domain youth and lack of reputation.

Risk Factors (2)
Very new domain (9 days) with a WordPress admin/login path
Domain has no reputation ranking in Cisco Umbrella
Safety Factors (7)
Standard WordPress wp-login.php form, not a custom credential-harvesting form
reCAPTCHA verification served from ranked recaptcha.net (top-1M)
No Indicators of Compromise matches against the page or its resources
No JavaScript malware (YARA) patterns, no high-precision native YARA hits
No network IDS alerts, no credential exfiltration, no cross-origin form submissions
No brand impersonation or typosquatting observed
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 4
Domain age information unavailable

Details

Page Title

Bot Verification

Scan Type

public

Domain Name Analysis

You're looking at domain '999qq.com.pk' on the Pakistani country-code top-level domain (.com.pk) without a subdomain. Its registrable label '999qq' stretches across 5 characters with zero vowels and 2 consonants, notching 3 digits. Segmentation suggests two words: 999, qq. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://999qq.com.pk/wp-admin/

Page Load Overview

2.05s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:65%
Script:Latin
Direction:ltr

Detection Details

Text Length:54 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
65.182.209.76Amsterdam, North Holland, Netherlands
AS62068SpectraIP B.V.
6142.251.14.94Google · CDNUnited States
AS15169Google LLC
6192.178.183.94Google · CDNUnited States
AS15169Google LLC
6142.251.20.94Google · CDNUnited States
AS15169Google LLC
244--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18DA1987209B110149C1383B5A6E1778A69639303F586D9A07CFCA760FF9DDF6C483BA8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:LrlklWJCwUmpK7AxGJIi+KfEg9jKmDOynZg9jt:KlWJCwUmpK7kGJIKsg9mmwJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4929:oaBdGgCgAwAAiABADgIEAAEoQwAAlAEpESA1CDMAAAkABEACUCiJAKgoCCkFIBIKAsAEQQQQxUABmzQAQAcAABABiAAEAAAC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7e7ffffff
Perceptual Hash:e6669199663399cc
Difference Hash:4d4d4d4d0d000400
Wavelet Hash:e4c0c0e4273f3e3e
Color Hash:#ac8053

Scan History

Scan history not available

Unable to load historical scan data