Security Scan: ...

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7d3fa35b-d78a-46a7-96db-8d8c609d4ce7 Domain and IP registration (RDAP)/api/v1/rdap/7d3fa35b-d78a-46a7-96db-8d8c609d4ce7How often this domain was scanned/api/v1/domain/stats/9p.kslry.cn Scan history for this domain/api/v1/domain/history/9p.kslry.cn?limit=15

This website contacted 3 IPs in 2 countries across 2 domains to perform 3 HTTP transactions. The main domain is kslry.cn and was registered 1 month ago.

Submitted URL: https://9p.kslry.cn

Effective URL:

https://qemow.com/go/3115960?subid1=kslry.cn

Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

Risk Score

An empty cross-domain redirect gateway (9p.kslry.cn to unranked qemow.com) with a hidden-field forwarding form. No credential, payment, IoC or malware evidence — capped at moderate risk by the bare redirect shell alone.

Risk Factors (3)

Cross-domain redirect to an unrelated, unranked registrable domain (qemow.com) with a tracking-style subid parameter

Empty gateway page with a hidden-field redirect form and no substantive content explaining its purpose

Opaque destination — nothing on the page identifies the operator or the redirect target

Safety Factors (5)

No password, username, or payment fields (0 credential-capture inputs verified in the DOM)

No Indicators of Compromise or threat-intelligence matches on the page or its resources

No JavaScript malware (hunting rule) patterns and no known malicious kit in the roster

All scripts served from the site's own domain; no cross-origin credential exfiltration detected

Cross-domain redirects are ordinary infrastructure behavior and are not treated as a risk factor on their own

Domain age information unavailable

Details

Page Title

...

Scan Type

public

Domain Name Analysis

Domain '9p.kslry.cn' uses the Chinese country-code top-level domain (.cn); it also runs on subdomain '9p'. Count 5 characters in 'kslry' with zero vowels and 5 consonants. It segments into three words: k, slr, y. Expect one character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.73s

Total Load Time

1 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:3 chars

Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	46.8.8.223	Prague, Prague, Czech Republic	AS60592Gransy s.r.o.
1	136.68.174.88Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	46.8.9.227	Prague, Prague, Czech Republic	AS60592Gransy s.r.o.
3	3	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E593B450F3D4684122879FBBFB1BFDD0E91A5C6978444C8BC4447FB86EAA226E6D0D31

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:VPxaVW5uaKDNH5v6CBCk+5IUgvCSR+/8ugo2f4AN05Tv3Bu7oM:VPxaV7v6CBNmIUupMQ4ANez3Bu7oM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:94060:gNDOaBGzQ0QG9ZkIB8QA0HAIAQACAYqjpDYvNZAFTwAHhRCbgixLAOMAjCiDJmIDigFQiRMGTAAwHdACYgKIHppiAAoowQTg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: 9p.kslry.cn