Security Scan Report: cineotv.one

Redirected to:
https://buyer.cineotv.one/
Site favicon
Submitted: Sep 18, 2026, 3:47:40 AMCompleted: Sep 18, 2026, 3:48:14 AMpubliccompleted

This website contacted 2 IPs in 1 country across 2 domains to perform 6 HTTP transactions. The main domain is buyer.cineotv.one and was registered 6 months ago.

Submitted URL: https://cineotv.one

Effective URL:

https://buyer.cineotv.one/
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Domain cineotv.one carries multi-source corroborated APT UNC6691 malware intelligence and hosts a TikTok-branded storefront on an unrelated, unranked domain. Avoid interaction.

Risk Factors (4)
Content-malware Indicators of Compromise on the primary domain, corroborated by multiple independent threat feeds (APT UNC6691)
Impersonation of the TikTok brand on a mismatched, unrelated domain
No domain reputation / not ranked in Cisco Umbrella top 1M despite retail storefront presentation
Network IDS HIGH-severity alert for potentially bad traffic
Domain age information unavailable

Details

Page Title

T1

Scan Type

public

Domain Name Analysis

The domain 'cineotv.one' uses the .one top-level domain and has no subdomain. The core label 'cineotv' covers 7 characters split between 3 vowels and four consonants. Segmentation suggests two words: cine, otv. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cineotv.one

Page Load Overview

4.33s
Total Load Time
8 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:58%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:1,926 chars
Detector Agreement:100%
Language mismatch: Declared as zh-CN but detected as en

Website Classification

Primary Category

technology software58% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
58%
documentation technical
55%
e-commerce shopping
52%
cryptocurrency blockchain
50%

Detected Features

Search
Products

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.21.17.182Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.177.194Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
62--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19851DE3320F8222FA04A53B197E06018AA59C0DBD906851173BDCBED8F75FDAC55B5ED

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:TPq+j68Ywkpj3fHpV6PUBJnTQ2bD8m68Ywkpj3fH516vExJnDQGbDSGy:TPq+m5VoUB9TJbc5VIEx9DJbWGy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3144:QAQyAICIMgBBABCwEAAIAkQABAEAQBAgAAwABEkgEgCgDDAABAABAAAAQASQCgBRABAQBAgCgAAIIAcIAiUAggAAIClAEQaQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000001818000000
Perceptual Hash:993366cc993366cc
Difference Hash:0000001010000000
Wavelet Hash:0c0c1c1c3c3c3c3c
Color Hash:#bf8240

Other Hashes

Crop Resistant:0000001010000000

Scan History

Scan history not available

Unable to load historical scan data