Security Scan Report: finalshell-ssh.com

Site favicon
Submitted: Sep 13, 2026, 4:47:56 PMCompleted: Sep 13, 2026, 4:49:24 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Unofficial FinalShell download portal whose primary domain is flagged as APT malware 'kun3' by 2 independent feeds. No forms, but avoid downloading binaries from this host.

Risk Factors
Threat-intel malware match on the primary domain
Third-party download site wearing the FinalShell brand on a non-official domain
Unranked domain with minimal legitimacy signals
Dynamic eval() code execution on a download-focused page
Domain age information unavailable

Details

Page Title

FinalShell 下载

Scan Type

public

Domain Name Analysis

The domain 'finalshell-ssh.com' uses the commercial generic top-level domain (.com) with no subdomain. The core label 'finalshell-ssh' covers 14 characters holding 3 vowels versus 10 consonants, notching one hyphen. Breaking it apart gives 3 words: final, shell, ssh. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://finalshell-ssh.com

Page Load Overview

9.19s
Total Load Time
164 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:2,804 chars
Detector Agreement:50%

Website Classification

Primary Category

adult content98% confidence
Type: static
Method: ml+structural

All Detected Categories

adult content
98%
technology software
97%
documentation technical
90%
education learning
86%
download file sharing
74%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2106.74.32.242China
AS133118China Unicom IP network
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2150.171.28.10Azure · CLOUDUnited States
AS8075Microsoft Corporation
243.159.107.113Singapore
2150.171.27.10Azure · CLOUDUnited States
AS8075Microsoft Corporation
2125.74.108.42China
AS141998China Telecom
147--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B8B2AA9A46F4B46611D9B274F79D6B689E465873E84B4CA4BB7C484A8FD0F260CC30CF

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:BbLa5CSdAnBLWMIWtlfpRTYF/j0TII15i0qegLTinA0SoQf:VPdUa8pf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:25691:AM2ABEMC8AOIIAcoEKAIHzgiVgOHprFBMEjCKBAXALBRqpBQi4CICxFgCKiiCEEE1xVcUBAd1gDSBQkGBKyFUEkSQCNGATpy

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000fffbc3ffdf
Perceptual Hash:b8471ee1b8c73961
Difference Hash:cde1e16d139320b3
Wavelet Hash:000000ffd3c3ffdf
Color Hash:#867d2d

Scan History

Scan history not available

Unable to load historical scan data