ScanMalware.com

Security Scan Report: buhaowotjiasdjk.cyou

Redirected to:
https://buhaowotjiasdjk.cyou/#/pages/login/login
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6cdddca8-f0b0-443d-a9d7-5705198c100cDomain and IP registration (RDAP)/api/v1/rdap/6cdddca8-f0b0-443d-a9d7-5705198c100cHow often this domain was scanned/api/v1/domain/stats/buhaowotjiasdjk.cyouScan history for this domain/api/v1/domain/history/buhaowotjiasdjk.cyou?limit=15
This website contacted 4 IPs in 4 countries across 3 domains to perform 8 HTTP transactions. The main domain is buhaowotjiasdjk.cyou and was registered 5 months ago.

Submitted URL: http://buhaowotjiasdjk.cyou/

Effective URL:
https://buhaowotjiasdjk.cyou/#/pages/login/login
Redirected

AI Security Verdict

High Risk

Confidence: 92%

10
Risk Score

The site is a newly registered, unranked domain exhibiting critical IDS malware alerts and heavily obfuscated JavaScript, indicating active malware distribution. Avoid and report.

Risk Factors (5)
New (<7 days) unranked domain
Critical IDS alerts indicating malware C2 and data exfiltration
High JavaScript obfuscation and suspicious static analysis scores
Multiple redirects
External CDN domains often used for payload delivery
Domain age information unavailable

Details

Page Title

登录

Scan Type

public

Domain Name Analysis

The domain name 'buhaowotjiasdjk.cyou' uses the .cyou top-level domain without a subdomain. Count 15 characters in 'buhaowotjiasdjk' with six vowels and 9 consonants. Tokenizing the label suggests 7 words: bu, hao, wot, ji, as, dj, k. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://buhaowotjiasdjk.cyou/

Page Load Overview

2.85s
Total Load Time
381 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:105 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2163.181.58.166Frankfurt am Main, Hesse, Germany
AS24429Zhejiang Taobao Network Co.,Ltd
2124.222.174.117Shanghai, Shanghai, China
AS45090Shenzhen Tencent Computer Systems Company Limited
2206.119.89.98Hong Kong, Hong Kong
AS140227Hong Kong Communications International Co., Limited
264.32.26.230Chicago, Illinois, United States
AS46844Sharktech
84--

Detected Technologies2

X-UA-Compatible
100%
Vue.js
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11733843675092329D637CD24B8A17A1FA116D233C20745ECB39DA72E8FC79C71AB1798

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:IdZXEn193sxeF0aCYGKV2Ot/q17RMJ7TzhBeC3D:/93sxeF0aCYGKV2Ot/q17Y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:51891:AECAARl2KRklCAIME8HcVkAAowAgADBEFAsAJwpCMxLItQQNMBkwFJmfzCdEkioBAgCC8kE98UHBIgUydkoyexEEWCaCuagg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f0f0f0fffffc7ff
Perceptual Hash:9818e7e7c620cee6
Difference Hash:70b434b469308e8e
Wavelet Hash:000000003c3c00e0
Color Hash:#e0da6c

Other Hashes

Crop Resistant:70b434b469308e8e,0000001010000000,8555808989900909

Scan History

Scan history not available

Unable to load historical scan data