Security Scan Report: deepseekcn.cyou

Site favicon
Submitted: Completed: publiccompleted
This website contacted 27 IPs in 3 countries across 12 domains to perform 35 HTTP transactions. The main domain is deepseekcn.cyou and was registered 8 months ago.

Submitted URL: https://deepseekcn.cyou/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Unofficial domain presenting itself as DeepSeek's official site, with a corroborated content-malware threat-intel match on the domain itself. No forms seen, but avoid interaction.

Risk Factors (4)
Brand impersonation of DeepSeek on a non-official domain
Content-malware threat-intelligence match on the primary domain (2 corroborating feeds)
Domain absent from Cisco Umbrella top 1M while claiming to be a major AI vendor
Obfuscation-capable dynamic code execution (eval) on a page posing as a corporate homepage
Domain age information unavailable

Details

Page Title

DeepSeek | 深度求索官网

Scan Type

public

Domain Name Analysis

Domain 'deepseekcn.cyou' uses the .cyou top-level domain and has no subdomain. The core label 'deepseekcn' covers 10 characters split between four vowels and six consonants. Tokenizing the label suggests three words: deep, seek, cn. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://deepseekcn.cyou/

Page Load Overview

5.04s
Total Load Time
585 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:41%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh
Text Length:863 chars
Detector Agreement:75%
Language mismatch: Declared as zh but detected as en

Website Classification

Primary Category

technology software91% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
91%
government public service
43%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9104.21.78.19Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.214.134Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1125.74.108.43China
AS141998China Telecom
1142.251.127.97Google · CDNUnited States
AS15169Google LLC
143.169.95.124Singapore
AS9808China Mobile Communications Group Co., Ltd.
1142.251.20.154Google · CDNUnited States
AS15169Google LLC
1142.251.157.119Google · CDNUnited States
AS15169Google LLC
1192.178.183.149Google · CDNUnited States
AS15169Google LLC
1123.6.72.100China
AS4837CHINA UNICOM China169 Backbone
1148.153.240.78United States
AS63199CDS Global Cloud Co., Ltd
3527--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T168B30936D146E8A9E816EFE9A5356D36354BE02B9F83C360C2D8CB355542CBCCA91DC2

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:e20l1xiJ2qTAkWxWLWC9WkWnW69WkWnWJi:Sxw2q0o

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:108867:JsgRRBUOQCxsBAxU0GILBmJTQV3lIkkbdOgkWRgjoJRkvBQgMGyIBJoxgxAEENhARaSRJ8EDIEiUI4A7EBDQ2AgpgKLBFoRB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fee6e67c0000ffff
Perceptual Hash:d7c1a95c55a41a76
Difference Hash:920cccd47038260c
Wavelet Hash:fee6e4640000f3ef
Color Hash:#1f5393

Other Hashes

Crop Resistant:920cccd47038260c

Scan History

Scan history not available

Unable to load historical scan data