Security Scan Report: python.zhhy888999.com

Submitted: Nov 1, 2025, 9:15:13 AMCompleted: Nov 1, 2025, 9:16:06 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is python.zhhy888999.com and was registered NaN years ago.

Submitted URL: https://python.zhhy888999.com/?token=Rpc0vMBUuMC1TwzZbezLvMCJTMCH52Aa

AI Security Verdict

Moderate Risk

Confidence: 70%

4
Risk Score

Login form present but no strong malicious signals; proceed cautiously.

Risk Factors
Credential harvesting form on an unranked domain
Safety Factors
Domain age > 8 years (well‑established)
No malicious Indicators of Compromise matches found
Domain age information unavailable

Details

Page Title

正在处理

Scan Type

public

Language

🇨🇳

Chinese

(60% confidence)

Category

cryptocurrency blockchain

(98%)

Domain Information

Within the commercial generic top-level domain (.com), 'python.zhhy888999.com' is registered, featuring subdomain 'python'. Its registrable label 'zhhy888999' stretches across 10 characters with 0 vowels and four consonants; it also includes six digits. Word splitting yields 3 words: zh, hy, 888999. Median word length is 2 characters. 'hy' is most common in Afrikaans usage. Secondary signals appear in Chinese (Zhuyin) and Vietnamese.

Screenshot

Security scan screenshot of https://python.zhhy888999.com/?token=Rpc0vMBUuMC1TwzZbezLvMCJTMCH52Aa

Page Load Overview

27.09s
Total Load Time
4
HTTP Requests
1
Domains
N/A
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Language Code:zh
Detection Confidence:60%
Script Type:Han
HTML Lang Attribute:cn
Text Length:112 chars
Detector Agreement:100%
Language mismatch: Declared as cn but detected as zh

Website Classification

Primary Category

cryptocurrency blockchain98% confidence
Type: webapp
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
98%
technology software
91%
documentation technical
67%
government public service
58%
healthcare medical
34%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1188.114.97.3United States
AS13335CLOUDFLARENET
1188.114.96.3United States
AS13335CLOUDFLARENET
12a06:98c1:3121::3United States
AS13335CLOUDFLARENET
12a06:98c1:3120::3United States
AS13335CLOUDFLARENET
44--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16CA1D72371416452B1ABD9E91CF24B9E72558601E10B96BCBFFC227CC3CDD55D932388

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:AS1DyzJpMgj5aNXyRzYD8MOApy4UwxnQK88/outeX1dMD:AS1V7XOzYpPUwZ3TtF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4867:AIAQFoAQMgIEFQIUGGKAIaIChBCAQAAAAASgECAEAEAQHDAwhBABGggAgEDBAIAJwLhA1SgIJAEgIAwAoWAECCgEADDAAEEg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff020303000000ff
Perceptual Hash:b525da5acab4b514
Difference Hash:391636367e3878aa
Wavelet Hash:ff030303000e7fff
Color Hash:#4062bf

Scan History

Scan history not available

Unable to load historical scan data