Security Scan Report: luxora.qpon

Redirected to:
https://luxora.qpon/cgi-sys/suspendedpage.cgi
Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 2 domains to perform 6 HTTP transactions. The main domain is luxora.qpon and was registered 3 weeks ago.

Submitted URL: https://luxora.qpon/AdobeInstaller.html

Effective URL:
https://luxora.qpon/cgi-sys/suspendedpage.cgi
Redirected

AI Security Verdict

Moderate Risk

Confidence: 72%

5
Risk Score

Suspended hosting page on a 15-day-old, unranked domain that carries a single-source phishing report and an 'AdobeInstaller.html' path suggestive of a fake-installer lure; no live form or malware was confirmed.

Risk Factors (3)
Phishing threat-intel match on the primary domain (single-source, unverified)
Domain only 15 days old and unranked
Suspicious installer-style URL path using a third-party brand name (Adobe) on an unrelated domain
Safety Factors (5)
No forms of any kind (0 password, 0 payment, 0 total) — no credential harvesting possible on the captured page
No JavaScript malware / YARA patterns and no obfuscated or exfiltrating scripts
No network-level IDS alerts and no cross-origin credential exfiltration
The site is currently suspended and serving no active content
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Account Suspended

Scan Type

public

Domain Name Analysis

The domain 'luxora.qpon' uses the .qpon top-level domain with no subdomain. The registrable portion 'luxora' spans 6 characters split between three vowels and 3 consonants. Splitting it apart reveals two words: luxor, a. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://luxora.qpon/AdobeInstaller.html

Page Load Overview

10.95s
Total Load Time
55 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:58%
Script:Latin
Direction:ltr

Detection Details

Text Length:120 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content40% confidence
Type: static
Method: ml+structural

All Detected Categories

adult content
40%
finance banking
36%
news media journalism
33%
cryptocurrency blockchain
27%
government public service
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
350.6.202.214Ashburn, Virginia, United States
AS31898Oracle Corporation
3104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
62--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13DF1F8A72AE3000B740712A87ABE3206AB59A503911ACD607F0DF6E9CF87980CC43759

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:ylVZHCkA26xd3Q4JRveuTtMy47R/Ga0kVhFuPwf8Pn9wHHyJRe:mJvVGaRF8I8A

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7610:kGACNCIhIJIwpDcGcmGjCAMiAiCEEICESIggII4CJoAqMFAAeA0gM4F5BFCgAi0KMqGQUECMIzDBgGhEEEAE4UhuCEQCZlIG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000ffffffffff
Perceptual Hash:e767878e989c3c18
Difference Hash:7848003000000000
Wavelet Hash:070000cf0f0f0f0f
Color Hash:#9f53ac

Scan History

Scan history not available

Unable to load historical scan data