ScanMalware.com

Security Scan Report: ch0295.xyz

Redirected to:
https://fp9.992kp618.com:9443/index.html
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c40b5722-c1a1-4c0b-a5c5-7f77af325b07Domain and IP registration (RDAP)/api/v1/rdap/c40b5722-c1a1-4c0b-a5c5-7f77af325b07How often this domain was scanned/api/v1/domain/stats/ch0295.xyzScan history for this domain/api/v1/domain/history/ch0295.xyz?limit=15
This website contacted 19 IPs in 2 countries across 10 domains to perform 80 HTTP transactions. The main domain is ch0295.xyz and was registered 4 years 6 months ago.

Submitted URL: https://ch0295.xyz/

Effective URL:
https://fp9.992kp618.com:9443/index.html
Redirected

AI Security Verdict

Low Risk

Confidence: 62%

3
Risk Score

Adult video streaming page on the site's own 992kp brand using rotating mirror domains; no credential or payment forms, no impersonation, no Indicators of Compromise or malware. Moderate risk from unverified adult/piracy content, not phishing.

Risk Factors (4)
Adult content site requiring only a self-declared 18+ click-through with no age verification
Rotating mirror domains and non-standard port (9443) used for block evasion, characteristic of content of questionable legality/licensing
Entry host ch0295.xyz redirected to an unrelated registrable domain, so the entry domain's 23-day age and lack of ranking describe only the redirector
No verifiable ownership, licensing or contact information beyond anonymous 'anti-block' email addresses
Safety Factors (6)
No credential, login or payment form anywhere on the page
No brand impersonation — the page displays its own 992kp branding
No Indicators of Compromise, malware hunting-rule patterns, known-kit matches or Safe Browsing hits
No JavaScript obfuscation, DevTools blocking or credential exfiltration behavior detected
Bot-protection mismatch between scanner and residential client is consistent with ordinary anti-bot measures on a media site
Verdict names no specific threat, and DOM analysis found no password field (real or disguised) or payment field and no other hard signal — elevated score unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

992kp快樂看片

Scan Type

public

Domain Name Analysis

The domain name 'ch0295.xyz' uses the open generic top-level domain (.xyz) without a subdomain. The core label 'ch0295' covers 6 characters holding 0 vowels versus 2 consonants, along with four digits. Tokenizing the label suggests 2 words: ch, 0295. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

BATU (Se — HED ERT) ¢ https://fp7.992kp617.com:8443 AB TRA, Aiwlsmia TEA !

Page Load Overview

1.04s
Total Load Time
7.1 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:146 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media90% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
90%
adult content
54%
social media network
36%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
823.225.98.35United States
AS40065CNSERVERS LLC
423.224.179.35United States
AS40065CNSERVERS LLC
4172.247.250.236United States
AS40065CNSERVERS LLC
423.225.91.220Los Angeles, California, United States
AS40065CNSERVERS LLC
423.224.179.181United States
AS40065CNSERVERS LLC
423.224.132.86United States
AS40065CNSERVERS LLC
423.224.132.12United States
AS40065CNSERVERS LLC
423.225.159.122United States
AS40065CNSERVERS LLC
4172.247.0.5United States
AS40065CNSERVERS LLC
443.152.43.117Singapore
AS139341ACE
8019--

Detected Technologies6

X-UA-Compatible
100%
JQueryv2.1.0
100%
Nginx
50%
OpenResty
40%
HSTS
40%
Google Analytics
35%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T125C3C0B4A72DEF5CA4C60C84B5380429D4BD3D1BD3228EEFB94C61FA5BDDC960A1B605

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:FgwUPy5HN5B3bvj7IoPy5HN5B3bvj7s9IFR:FPGyzn3bvHIayzn3bvHs9IFR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:123853:BwWgbJcTGygoByAEO+J2IYRxA0RentQIQAJ4F2rYEBIgRRchjUAAExkFQrYSAMoVgMyEUTAAAIt4gNkmIzJAVY5ACOJh6UAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181838007e7e
Perceptual Hash:883dc03773c63fc1
Difference Hash:35353131690dd4d4
Wavelet Hash:011939393d017f7f
Color Hash:N/A

Other Hashes

Crop Resistant:cbcbcbcbcbcbc3c4,55479a6329314345,0000000000000000,66e2eae2eae8e660,31303030680dd0d0

Scan History

Scan history not available

Unable to load historical scan data