Security Scan Report: vip311.cc

Redirected to:
https://vip311.cc/index.html?shareName=ky35888.com
Submitted: Sep 17, 2026, 10:48:16 AMCompleted: Sep 17, 2026, 10:49:03 AMpubliccompleted

This website contacted 4 IPs in 4 countries across 6 domains to perform 38 HTTP transactions. The main domain is vip311.cc and was registered 7 months ago.

Submitted URL: https://vip311.cc

Effective URL:

https://vip311.cc/index.html?shareName=ky35888.com
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

New 66-day-old unranked .cc domain with a single-source malware Indicator of Compromise (gemstuffer/peckbirdy) on the domain itself; no forms detected, but the malware flag, DNS TLD alert, and scrambled anonymous content warrant avoidance.

Risk Factors (4)
Content-malware Indicator of Compromise (gemstuffer/peckbirdy) matched against the scanned page's own primary domain
Newly registered domain (66 days) using a .cc TLD with a HIGH-severity DNS TLD alert
No page identity: generic 'Demo' title unrelated to domain, scrambled OCR content, and redirect/share parameters to an unrelated external domain
Unranked domain with no legitimate reputation trail
Domain age information unavailable

Details

Page Title

Demo

Scan Type

public

Domain Name Analysis

You're looking at domain 'vip311.cc' on the .cc country-code top-level domain with no subdomain. Its registrable label 'vip311' stretches across 6 characters containing 1 vowel alongside 2 consonants; bonus characters include three digits. Splitting it apart reveals two words: vip, 311. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://vip311.cc

Page Load Overview

15.89s
Total Load Time
1.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:64%
Script:Latin
Direction:ltr

Detection Details

Text Length:72 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain76% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
76%
documentation technical
66%
technology software
50%
healthcare medical
40%
news media journalism
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11104.208.110.252Azure · CLOUDHong Kong, Hong Kong
AS8075Microsoft Corporation
943.159.107.113Singapore
9125.74.108.43China
AS141998China Telecom
9188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
384--

Detected Technologies1

JQueryv2.2.4
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D5F0058740B0180C21145D089CC5F0148CFCD51FA67549D0B4E8183D8F95FE9C0F763D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:hax/oY6YkiPfAbpl+jTQ1jJTpADt3sJqvAxt3sJ+FdGH9pA2tXepKgG4LKT6kdFS:hax/LwOj8J9AiOskzXYdJsVG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:552:AAAAAAAAAAAAAAAASAAIAAAAAIAABAAAAAAAAAAAAAAABAAQAAAAAAAAABAggAAAABgAEAAAAAAAAAAAAAgAAAEAABAAEAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3c3c3c3c3c3c3c3
Perceptual Hash:b0db663396336992
Difference Hash:8e96969696968e8e
Wavelet Hash:c3c3c3c3c3c3c3c3
Color Hash:#ac537e

Scan History

Scan history not available

Unable to load historical scan data