Security Report: nyhsqwao.lol - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8a8d8344-5a3f-4f1a-bc00-ff0a7b1b52ed Domain and IP registration (RDAP)/api/v1/rdap/8a8d8344-5a3f-4f1a-bc00-ff0a7b1b52edHow often this domain was scanned/api/v1/domain/stats/nyhsqwao.lol Scan history for this domain/api/v1/domain/history/nyhsqwao.lol?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is nyhsqwao.lol and was registered 1 day ago.

Submitted URL: https://nyhsqwao.lol/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Confirmed fake file-host download page running the PPI key-PIN archive lander kit: it poses as 'DriveFiles' to push a PIN-protected SETUP archive for malware delivery. Do not download or run anything from it.

Risk Factors (5)

Known malicious phishing kit identified by the analyst-vetted kit roster (pay-per-install archive delivery)

Critical hunting-rule match for the PPI key-in-PIN archive lander pattern

Fake file-hosting/download page fronting a password-protected 'SETUP' archive for malware delivery

Domain less than one day old, .lol TLD, no reputation

Brand-style page ('DriveFiles') on a domain unrelated to any real file-sharing provider

Domain age information unavailable

Details

Page Title

DriveFiles - Copy File Link

Scan Type

public

Domain Name Analysis

Within the .lol top-level domain, 'nyhsqwao.lol' is registered and has no subdomain. The registrable portion 'nyhsqwao' spans 8 characters split between 2 vowels and six consonants. Breaking it apart gives five words: ny, h, sq, wa, o. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.30s

Total Load Time

4 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:270 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software39% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

39%

download file sharing

38%

documentation technical

32%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	172.67.214.250Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.21.67.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	2	-	-

Detected Technologies3

HTTP/3

40%

Cloudflare Bot Management

40%

Cloudflare

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14A3241ABE5B300566853E8662FE72A4E3164E007C40BCA587F9CA78CCFC68D69D5375C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:GE0O+VDSkcoo0WQX+E1Vxg9YjYX3FZiJ/klBnV19CyW:VpIX++uZlBnV1A

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11444:RDQYgPEgEpyNYqaAjG4AQwXAggEQAEwCqIEhGZYgXaU5yCIQUhBCIDpYIIQc7DRxQDAIPAhA3Il4MFSjAaQ8E81MQQkoAIYC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c3c183c0000

Perceptual Hash:cbc73438c9e3c61c

Difference Hash:1060615171612000

Wavelet Hash:003c3c3c3c3c1000

Color Hash:38006000000

Other Hashes

Crop Resistant:1060615171612000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: nyhsqwao.lol