ScanMalware.com

Security Scan Report: chxx42.com

Redirected to:
https://fp0.992kp619.com:9443/index.html
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7293094a-6dcf-479d-bb85-eb49fb343a18Domain and IP registration (RDAP)/api/v1/rdap/7293094a-6dcf-479d-bb85-eb49fb343a18How often this domain was scanned/api/v1/domain/stats/chxx42.comScan history for this domain/api/v1/domain/history/chxx42.com?limit=15
This website contacted 21 IPs in 2 countries across 10 domains to perform 85 HTTP transactions. The main domain is chxx42.com and was registered 1 year 6 months ago.

Submitted URL: https://chxx42.com/

Effective URL:
https://fp0.992kp619.com:9443/index.html
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

4
Risk Score

Rotating-domain adult streaming page (992kp) with no forms, no malware or phishing indicators; only mild concerns are the cross-domain redirect to an unknown-age host and unranked ad script networks.

Risk Factors (3)
Redirect chain crosses registrable domains from a 25-day-old, unranked entry host to an unrelated domain of unknown age
Domain-rotation / block-evasion design (rotating numbered hosts, backup address and 'anti-block' email published on-page)
Unranked third-party ad script hosts of unknown ownership loaded on the page
Safety Factors (4)
No credential, login or payment forms on the page (password fields = 0, payment fields = 0)
No Indicators of Compromise matches, no hunting rule malware patterns, no known malicious kit identified
No JavaScript credential exfiltration detected; the only cross-origin targets are unranked ad hosts and Google Analytics
Page presents its own 992kp branding, not another entity's brand — no impersonation observed
Domain age information unavailable

Details

Page Title

992kp快樂看片

Scan Type

public

Domain Name Analysis

The domain name 'chxx42.com' uses the commercial generic top-level domain (.com). The registrable portion 'chxx42' spans 6 characters with 0 vowels and four consonants, along with two digits. Breaking it apart gives three words: ch, xx, 42. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

BATU (Se — HED ERT) ¢ https://fp4.992kp620.com:7443 AB TRA, Aiwlsmia TEA !

Page Load Overview

0.87s
Total Load Time
7.3 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:146 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media91% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
91%
adult content
54%
social media network
39%
cryptocurrency blockchain
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
523.224.179.182United States
AS40065CNSERVERS LLC
4142.250.154.97Google · CDNUnited States
AS15169Google LLC
4216.239.34.36Google · CDNUnited States
AS15169Google LLC
4216.239.32.36Google · CDNUnited States
AS15169Google LLC
423.225.91.222Los Angeles, California, United States
AS40065CNSERVERS LLC
4172.247.0.5United States
AS40065CNSERVERS LLC
423.224.179.35United States
AS40065CNSERVERS LLC
423.225.98.35United States
AS40065CNSERVERS LLC
423.224.132.86United States
AS40065CNSERVERS LLC
4172.247.250.236United States
AS40065CNSERVERS LLC
8521--

Detected Technologies7

X-UA-Compatible
100%
JQueryv2.1.0
100%
Nginx
50%
PHPv8.3.36
40%
OpenResty
40%
HSTS
40%
Google Analytics
35%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14AC3C0707B2EFF2DC5E50894B5390A61E05C1C1783168BEFBE0D62FA5ECDC9A1917A06

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:F392am0JZkvAd6L8WtekXkKKhjW1kdMm0JZkvAd6L8WtekXkKKhjW1kp9ISurK0R:Fp2AcNljgK2AcNlj09IFR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:122981:wiCCQUhBdGUCUDqJgkCBCMXWOIQACkDTwzOkxirHgaylgsgPhAdisBtUoGAAwytPQBiocDEEq4TFBICwkOjKBKBUEAUAMFCM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181838007e7e
Perceptual Hash:883dc03773c63fc1
Difference Hash:35353131690dd4d4
Wavelet Hash:011939393d017f7f
Color Hash:N/A

Other Hashes

Crop Resistant:cbcbcbcbcbcbc3c4,554d52332b552b65,0000000000000000,66e2eae2eae8e660,31303030680dd0d0

Scan History

Scan history not available

Unable to load historical scan data