ScanMalware.com

Security Scan Report: python.hitcrack.net

Submitted: Nov 3, 2025, 4:37:04 AMCompleted: Nov 3, 2025, 4:37:34 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 1 country across 1 domain to perform 6 HTTP transactions. The main domain is python.hitcrack.net and was registered NaN years ago.

Submitted URL: https://python.hitcrack.net/?token=PRST92yUigzULwyT9gza1gCKn3zLHwBa

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Site likely phishing by impersonating a Chinese government agency and harvesting credentials.

Risk Factors
Brand impersonation on an unranked domain
Hidden password field indicating possible credential harvesting
Password field in a form that appears to be a government service
Unranked domain used for phishing‑like activity
Domain age information unavailable

Details

Page Title

申请中心

Scan Type

public

Language

🇨🇳

Chinese

(60% confidence)

Category

government public service

(76%)

Domain Information

The domain 'python.hitcrack.net' uses the network infrastructure generic top-level domain (.net) with subdomain 'python'. Its registrable label 'hitcrack' stretches across 8 characters split between 2 vowels and 6 consonants. Word splitting yields two words: hit, crack. Expect four characters per word on average. Most frequently, 'hitz' shows up in Basque. Secondary signals appear in Swedish and Norwegian.

Screenshot

Security scan screenshot of https://python.hitcrack.net/?token=PRST92yUigzULwyT9gza1gCKn3zLHwBa

Page Load Overview

6.04s
Total Load Time
6
HTTP Requests
1
Domains
N/A
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Language Code:zh
Detection Confidence:60%
Script Type:Han
HTML Lang Attribute:zh-CN
Text Length:729 chars
Detector Agreement:50%

Website Classification

Primary Category

government public service76% confidence
Type: webapp
Method: ml+structural

All Detected Categories

government public service
76%
corporate business
72%
adult content
72%
documentation technical
70%
cryptocurrency blockchain
69%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3172.67.180.35United States
AS13335CLOUDFLARENET
1104.21.67.195United States
AS13335CLOUDFLARENET
12606:4700:3035::ac43:b423United States
AS13335CLOUDFLARENET
12606:4700:3037::6815:43c3United States
AS13335CLOUDFLARENET
64--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A4D2619665F309A2642BE4FA6FD7970636A49003C40DDD143FAC179C4F8ED81FA6378A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:ga/zlXHLdiiilv9mR/Q1KH3cIW0CX4yPUTh8rqZN2vlxpRJAzdIHosJPCRwhjJgD:pXLeTifdII6P66Rw8YgoRo5PghPbb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:31096:TgAB4FBk16JAwGizqinHAhYMFEDDkAlQBROKjIVAEgIAAgC6EX0BAIlKQgEEtLJWUZDpQAmAmLgAAtL1yI5VgICUkFVRg0W6

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data