ScanMalware.com

Security Scan Report: ch0639.xyz

Redirected to:
https://fp9.992kp618.com:7443/index.html
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d6306c19-8797-4d61-962f-7800209cc982Domain and IP registration (RDAP)/api/v1/rdap/d6306c19-8797-4d61-962f-7800209cc982How often this domain was scanned/api/v1/domain/stats/ch0639.xyzScan history for this domain/api/v1/domain/history/ch0639.xyz?limit=15
This website contacted 19 IPs in 2 countries across 10 domains to perform 80 HTTP transactions. The main domain is ch0639.xyz and was registered 4 years ago.

Submitted URL: https://ch0639.xyz/

Effective URL:
https://fp9.992kp618.com:7443/index.html
Redirected

AI Security Verdict

Low Risk

Confidence: 65%

3
Risk Score

Self-branded adult streaming portal with no forms, no credentials and no threat-intel, hunting rule or phishing hits; the only concerns are a young entry domain, rotating mirror addresses and adult content.

Risk Factors (3)
Site promotes rotating 'latest address' mirrors and anti-blocking email contacts, a pattern typical of adult/grey-market content sites that are frequently blocked
Entry hostname ch0639.xyz is a young, unranked domain on a TLD frequently abused, and the visible domain does not match the operator's own brand
Adult content served behind an age gate with no content-licensing disclosure
Safety Factors (4)
No credential, login, or payment form anywhere on the page — nothing to harvest
No Indicators of Compromise, no Safe Browsing hit, no hunting rule malware patterns, no known phishing kit
Cross-origin credential exfiltration not detected; script inventory shows only Google Tag Manager / Analytics on the third-party list
Destination page is self-branded — title and meta description reference 992kp, matching its own hosting domain
Domain age information unavailable

Details

Page Title

992kp快樂看片

Scan Type

public

Domain Name Analysis

Domain 'ch0639.xyz' uses the open generic top-level domain (.xyz) with no subdomain. The registrable portion 'ch0639' spans 6 characters holding zero vowels versus 2 consonants, notching 4 digits. Segmentation suggests 2 words: ch, 0639. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

BATU (Se — HED ERT) ¢ https://fp5.992kp617.com:7443 AB TRA, Aiwlsmia TEA !

Page Load Overview

0.96s
Total Load Time
6.8 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:146 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media90% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
90%
adult content
52%
social media network
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8172.247.250.236United States
AS40065CNSERVERS LLC
423.225.91.220Los Angeles, California, United States
AS40065CNSERVERS LLC
423.225.159.122United States
AS40065CNSERVERS LLC
423.224.179.35United States
AS40065CNSERVERS LLC
423.225.98.35United States
AS40065CNSERVERS LLC
4172.247.0.5United States
AS40065CNSERVERS LLC
423.224.132.86United States
AS40065CNSERVERS LLC
423.224.132.12United States
AS40065CNSERVERS LLC
423.224.179.181United States
AS40065CNSERVERS LLC
443.152.43.121Singapore
AS139341ACE
8019--

Detected Technologies6

X-UA-Compatible
100%
JQueryv2.1.0
100%
Nginx
50%
OpenResty
40%
HSTS
40%
Google Analytics
35%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10BC3BFB0671EFF7DA4CA0881BD790910D4AC5C0B4313C79A794DA2FA5BCDDD98E27A11

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:F0VXzwggzlQpjvajx8ZVXzwggzlQpjvajxz9IFR:F0ZzngzlQpjvE+ZZzngzlQpjvEZ9IFR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:122577:YlQSAGmAhV8iAAAKgQSEYQAg6ijAOBJRpaAVigQEAAREIwhIBpjkDJHCIuiER4FWmCZAIwbxgOSoBADCABvTZBEAFAIBCMIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181838007e7e
Perceptual Hash:883dc03773c63fc1
Difference Hash:35353131690dd4d4
Wavelet Hash:011939393d017f7f
Color Hash:N/A

Other Hashes

Crop Resistant:cbcbcbcbcbcbc3c4,554f5a6361252b65,0000000000000000,66e2eae2eae8e660,31303030680dd0d0

Scan History

Scan history not available

Unable to load historical scan data