Security Scan Report: yh118899.com

Submitted: Sep 26, 2026, 2:53:23 PMCompleted: Sep 26, 2026, 2:53:58 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Unranked numeric domain masquerading as official WPS Office and offering downloads of the product — classic brand-impersonation software fraud. No forms or malware IoC, but avoid downloading from this host.

Risk Factors (3)
Brand impersonation of WPS Office on a mismatched, unranked domain
Offers software downloads of another company's product from a non-official host
Unranked / no domain reputation combined with a major-brand claim
Domain age information unavailable

Details

Page Title

WPS智能办公软件 – AI驱动免费Office套件 | 下载Word/Excel/PDF全能工具

Scan Type

public

Domain Name Analysis

The domain name 'yh118899.com' uses the commercial generic top-level domain (.com) without a subdomain. The second-level label 'yh118899' is 8 characters long split between zero vowels and two consonants, plus 6 digits. Tokenizing the label suggests three words: y, h, 118899. Expect one character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://yh118899.com

Page Load Overview

1.30s
Total Load Time
296 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:1,167 chars
Detector Agreement:40%

Website Classification

Primary Category

technology software93% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
93%
cryptocurrency blockchain
85%
documentation technical
82%
finance banking
73%
government public service
57%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
345.197.239.24Seychelles
AS4907BGPNET PTE. LTD.
2104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2146.75.122.208Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
2104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
94--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B662F537A0D110536043E188BA36934F7462C217D5128E683EFC4AC9FFCDD9689A369E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:+M78It94J0Tf7zoR8UtaqxzCC+JHW1hmCXfDqfh4:htt94Jw7zoBjxzCC+JH8hmCvDqf6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:15077:mhDQoGQBmGlGWlDxZgwjjyDlQCSLCAM7IYiChxxOCyZIQERMMByvAkq4LOOEGIBip4AQAAsARrEAoEvJAiTRhLCg6okKRwQA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff191f1ffe7e7ff
Perceptual Hash:ed4992b296361a9b
Difference Hash:291333231e0f0f33
Wavelet Hash:fdd181b1c38181df
Color Hash:#9179d2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data