Security Scan: ...

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c7120a8d-170f-476b-9548-6a6cb0942698 Domain and IP registration (RDAP)/api/v1/rdap/c7120a8d-170f-476b-9548-6a6cb0942698 Certificate Transparency/api/v1/ct/qyvir.com How often this domain was scanned/api/v1/domain/stats/newburgfacer.top Scan history for this domain/api/v1/domain/history/newburgfacer.top?limit=15

This website contacted 3 IPs in 2 countries across 2 domains to perform 4 HTTP transactions. The main domain is newburgfacer.top and was registered 4 months ago.

Submitted URL: https://newburgfacer.top

Effective URL:

https://qyvir.com/go/2853751?ref=&subid1=&subid2=newburgfacer.top

Redirected

The Cisco Umbrella rank of the primary domain is #254,740 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 55%

Risk Score

Opaque .top-to-qyvir.com redirect gateway with tracking parameters and a blank interstitial containing only hidden form fields. No credential harvesting, impersonation, malware or IoC found; suspicious redirect behavior warrants caution only.

Risk Factors (4)

Cross-domain redirect from a .top hostname to an unrelated gateway domain (qyvir.com) with affiliate-style subid tracking

Near-empty interstitial page with hidden form fields and no legitimate content

HIGH-severity IDS alerts tied to the .top entry domain (potentially bad traffic)

Final landing domain (qyvir.com) has no age or reputation data available

Safety Factors (4)

No password, disguised-password or payment fields present — no credential/payment harvesting on the captured page

No JavaScript malware (YARA) matches and no known malicious kit in the roster

No threat-intelligence matches against the page or its loaded resources

All JavaScript served same-origin; no cross-origin credential exfiltration detected

Domain age information unavailable

Details

Page Title

...

Scan Type

public

Domain Name Analysis

Within the .top top-level domain, 'newburgfacer.top' is registered while skipping any subdomain. The second-level label 'newburgfacer' is 12 characters long with four vowels and eight consonants. Breaking it apart gives 4 words: new, burg, face, r. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.35s

Total Load Time

1 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:3 chars

Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	157.90.33.74	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
1	136.68.174.88Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	157.90.33.73	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
4	3	-	-

Detected Technologies3

Perl

50%

Angie

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19E93B450F3D4684122979FBBFB1BFDD0E91A5C6978444C8BC4447FB86EAA226E6D0D30

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:VjngVW5uaKDNH5v6CBCk+5IUgvCSR+/8ugo2f4AN05Tv3Bu7oM:VjngV7v6CBNmIUupMQ4ANez3Bu7oM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:94159:NAnjxDwJCMCAmQTgMGqA4kAOFwACwoLzsQthgFIWQCRqCggzkgqtSUAEiiAAOIotWsEDwJvAYGlS1Ig5EAaAAbcRQGDMAsWA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: newburgfacer.top