Security Scan Report: winrarsdwee.top

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is winrarsdwee.top.

Submitted URL: https://winrarsdwee.top/

AI Security Verdict

High Risk

Confidence: 76%

8
Risk Score

Look-alike 'winrar' domain offering winrar-x64.zip from an unrelated Aliyun cloud bucket with mismatched link text — a classic fake-software download lure; do not download or run the file.

Risk Factors (4)
Unaffiliated third-party binary/archive download presented as the named brand's installer
Brand-vendor mismatch between the download filename (winrar-x64.zip) and link text (360压缩包)
HIGH-severity IDS alerts associated with the host's TLD traffic
Impersonation of a well-known compression utility via a look-alike domain
Domain age information unavailable

Details

Page Title

压缩包-压缩和解压缩利器

Scan Type

public

Domain Name Analysis

Domain 'winrarsdwee.top' uses the .top top-level domain with no subdomain. Count 11 characters in 'winrarsdwee' containing 4 vowels alongside seven consonants. Word splitting yields four words: win, rar, sd, wee. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://winrarsdwee.top/

Page Load Overview

3.31s
Total Load Time
119 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:234 chars
Detector Agreement:67%

Website Classification

Primary Category

healthcare medical84% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

healthcare medical
84%
phishing scam
39%
finance banking
36%
real estate property
35%
technology software
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2103.112.98.105Hong Kong
AS400619AROSSCLOUD INC.
21--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F9243BBE9952128990178BA287DC4F684B2DC26314624CDE738D784FCF87F9E22D7647

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:SkZIwk1mA3kSDL3Kyu5ZrKeB0eTk1TDVMdSN+Ij9A91BCCCEO:PZIwk1mA3kSDL3Kyu5ZrKeB0eTk4INX7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:227447:AApiQsSBDCCRogBlYGOIqCGShkFAQgRSTyAykAwJjUkQHZk1BAKISAFoUYzqQSeGhAwGQCEHCQBURZ2LFRlAKkkxiOLEABRD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00300000000fffff
Perceptual Hash:8042cd2f3de73b2c
Difference Hash:c0e0c8ccdeff0432
Wavelet Hash:70780000037fffff
Color Hash:#d2a12d

Scan History

Scan history not available

Unable to load historical scan data