ScanMalware.com

Security Scan Report: www.mithvxrqkpn.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/923cc12a-a531-4850-b6af-d22b71a1830fDomain and IP registration (RDAP)/api/v1/rdap/923cc12a-a531-4850-b6af-d22b71a1830fHow often this domain was scanned/api/v1/domain/stats/mithvxrqkpn.comScan history for this domain/api/v1/domain/history/mithvxrqkpn.com?limit=15
This website contacted 3 IPs in 2 countries across 2 domains to perform 3 HTTP transactions. The main domain is mithvxrqkpn.com and was registered 4 months ago.

Submitted URL: https://www.mithvxrqkpn.com/upgradeapp/android_ACE532658.apk

Downloads:

AI Security Verdict

Moderate Risk

Confidence: 72%

5
Risk Score

Bare URL serving a 576 MB Android APK from an unrelated .cn host on a random, contentless domain — an executable-delivery lure consistent with malware distribution; do not install.

Risk Factors (4)
Direct download of a mobile executable (.apk) rather than any web content
Payload pulled from a separate, unrelated .cn domain, indicating chained/relay hosting typical of malware distribution
Randomly generated domain name with zero site content, no branding and no reputation
Fake software-update naming convention ('upgradeapp' + random hex filename)
Safety Factors (4)
No credential or payment form present (0 forms, 0 password fields, 0 payment fields)
No JavaScript behavioral anomalies, no third-party scripts and no cross-origin credential exfiltration
No threat-intelligence, hunting rule, kit-roster or IDS matches against the page or its resources
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'www.mithvxrqkpn.com' uses the commercial generic top-level domain (.com), featuring subdomain 'www'. The core label 'mithvxrqkpn' covers 11 characters holding 1 vowel versus 10 consonants. Tokenizing the label suggests seven words: mit, hv, x, r, q, kp, n. The median word length lands at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.mithvxrqkpn.com/upgradeapp/android_ACE532658.apk

Page Load Overview

0.36s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
143.159.94.82Singapore
AS139341ACE
1163.181.254.188United States
AS24429Zhejiang Taobao Network Co.,Ltd
1163.181.254.186United States
AS24429Zhejiang Taobao Network Co.,Ltd
33--

Detected Technologies2

HTTP/3
40%
EdgeOne
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11BE026CE18D2400112A251626EEB330829B3A2EB1015C84038CCF0119F75F9B96ABBAC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:hxuJLzLdntctQx/FK/gmmnyS3i+eHF528BkRWAhbcQ4Nhdx/Qb:hY5ctQx/FTxnyFF/2824Nbx/Qb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:5cb8458c587221206fd11dc856c2c77b

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data