Security Scan Report: sweet-iki-4263.holy.jp

Submitted: Sep 12, 2026, 10:48:10 PMCompleted: Sep 12, 2026, 10:50:41 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Single-source content-malware threat-intel match (APT Kimsuky) on the primary domain forces HIGH_RISK; page itself only serves a 404, no forms or live payload observed.

Risk Factors
Content-malware threat-intel match (APT Kimsuky) on the primary domain of the scanned page
Suspicious '/gmail.php' path on a subdomain unrelated to any Google property
Unranked in Cisco Umbrella — no reputation to offset the threat-intel hit
Domain age information unavailable

Details

Page Title

404 Error - Not Foundsecondary capture

Scan Type

public

Domain Name Analysis

Within the Japanese country-code top-level domain (.jp), 'sweet-iki-4263.holy.jp' is registered, featuring subdomain 'sweet-iki-4263'. The second-level label 'holy' is 4 characters long containing one vowel alongside 3 consonants. Breaking it apart gives one word: holy. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sweet-iki-4263.holy.jp/gmail.php

Page Load Overview

75.27s
Total Load Time
163 KB
Total Size

Language Analysis

Primary Language

🇯🇵Japanese
Code: ja
Confidence:80%
Script:Mixed
Direction:ltr

Detection Details

HTML Lang Attribute:ja
Text Length:123 chars
Detector Agreement:67%

Website Classification

Primary Category

adult content51% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
51%
documentation technical
46%
social media network
44%
finance banking
43%
news media journalism
42%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5133.130.34.142Japan
AS7506GMO Internet, Inc.
1118.27.125.235Japan
AS7506GMO Internet, Inc.
165.9.130.124Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
114.0.41.17Cdnetworks · CDNOsaka, Osaka, Japan
AS54994Meteverse Limited.
135.73.252.208Aws · CLOUDTokyo, Tokyo, Japan
AS16509Amazon.com, Inc.
1178.250.1.12France
AS44788Criteo Technology SAS
1202.233.84.3Japan
AS131957MicroAd, Inc.
134.36.131.60Google · CDNKansas City, Missouri, United States
AS396982Google LLC
123.207.210.150Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1202.233.84.16Japan
AS131957MicroAd, Inc.
1713--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11692FACB5BB1929688CAC64DFF355C886605E06B863BC9C531ED9708CF87EC8EE42D54

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:2vLvM4L/lOhQm3Iv9i8P4GHOtVdVlujniWrmUc0:QvLGEQGutllu/D

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19366:kRjXQEQxBgQFGaJAAwSi0hmS8FxibCAhAASFOAlEFIFsFBeCAiUJQLCEGCJIc22QiKAfCARAlFIxppGgZg5oOyJFgAYIhK2z

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7c3ffffffffff
Perceptual Hash:b333cececc383161
Difference Hash:080c0e1000000000
Wavelet Hash:e4c4c0ccf0f0f0f0
Color Hash:#7940bf

Other Hashes

Crop Resistant:080c0e1000000000

Scan History

Scan history not available

Unable to load historical scan data