Security Scan Report: q8t4y7.cn

Redirected to:
https://q8t4y7.cn/pc.html#/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 7 domains to perform 93 HTTP transactions. The main domain is q8t4y7.cn and was registered 6 months ago.

Submitted URL: http://q8t4y7.cn/

Effective URL:
https://q8t4y7.cn/pc.html#/
Redirected

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

The site is a high‑risk, likely malware distribution page due to a critical C2 alert, brand‑new unranked domain, and heavily obfuscated JavaScript.

Risk Factors (5)
Newly registered domain (<7 days)
Unranked domain lacking reputation
Critical IDS alert indicating malware command‑and‑control activity
Highly obfuscated JavaScript code
Absence of visible legitimate content
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the Chinese country-code top-level domain (.cn), 'q8t4y7.cn' is registered without a subdomain. The registrable portion 'q8t4y7' spans 6 characters holding zero vowels versus three consonants; it also includes three digits. Breaking it apart gives 6 words: q, 8, t, 4, y, 7. Average segment length settles at one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://q8t4y7.cn/

Page Load Overview

8.21s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
31101.71.88.61China
AS4837CHINA UNICOM China169 Backbone
3143.161.216.205Hong Kong, Hong Kong
AS132203Tencent Building, Kejizhongyi Avenue
3114.29.235.194Guangzhou, Guangdong, China
AS4134Chinanet
933--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1686143F2970C151A512764C6BC98B3C4103F402BA6261FEBEEE1B93CE2E990C021777E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:C3mAqGe8R/8I8cPCR2W8r7n8r1OhFsiyE23+uixj:C3mVGem/F69mns8hFC8j

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3296:gRBQAkgABBACCAAAACAAIAAEAiQghyACGAFARABQgAIAABIIgKCFABYAwABAQQAABQAGCQgIAAAJohURAAogARAAAAFAAEAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:184840485a0c5800
Perceptual Hash:99666699cc6666cc
Difference Hash:30121414320a324c
Wavelet Hash:382820281f0f1f07
Color Hash:#56862d

Other Hashes

Crop Resistant:30121414320a324c

Scan History

Scan history not available

Unable to load historical scan data