Security Scan Report: test.qycz.org

Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 2 domains to perform 73 HTTP transactions. The main domain is qycz.org and was registered 6 years ago.

Submitted URL: https://test.qycz.org/a/202610/n39179789/web/

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Mirror of an Epoch Times news article on an unrelated domain, using that publisher's branding and copyright notice. No credential or payment forms, no malware, no Indicators of Compromise; an informational IDS phishing signature is the only alert. Suspicious mirroring, not credential theft.

Risk Factors (3)
Unauthorized mirroring of another publisher's article and branding on an unrelated hostname
Domain carries another organisation's brand name and copyright notice without being that organisation
Low-severity IDS phishing signature for mirrored-website comment observed (informational, high false-positive rate)
Safety Factors (5)
No credential, password, or payment collection forms present
No Indicators of Compromise against the page or its resources
No JavaScript malware patterns or obfuscated behaviour detected
No cross-origin credential exfiltration; only cdnjs.cloudflare.com serves scripts
Domain registered in 2020 (well established) and page content is ordinary news reporting, not a lure
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'test.qycz.org' on the non-profit oriented generic top-level domain (.org); it also runs on subdomain 'test'. The registrable portion 'qycz' spans 4 characters with zero vowels and 4 consonants. Breaking it apart gives three words: q, y, cz. Median word length is one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://test.qycz.org/a/202610/n39179789/web/

Page Load Overview

3.11s
Total Load Time
4.1 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-Hans
Text Length:3,355 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network72% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
72%
news media journalism
57%
healthcare medical
53%
adult content
40%
government public service
36%

Detected Features

Search
Comments
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
37159.89.36.148Clifton, New Jersey, United States
AS14061DigitalOcean, LLC
36104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
732--

Detected Technologies6

PHPv7.4.4
40%
Nginxv1.10.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14E44E9347108D9699D075D44313EEE39A08FC67FC92ADE68E3FCCA6146829BB9F915C0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:XqlmcNQfYQ+QZUnGKE23NQCMLARWa9j2Idf2IdiJYqNY6+:0QAQ+QGhR2Qf2Qf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:264506:GeKICFmQEAYlpgBCoNVBEkAVEIoKg0oAwDMeAAGSA9QAaYQghIgALSAwYbmh0YYFDoECxoLaEBHMFQAyMDskCkGBhMirgyCA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data