ScanMalware.com

Security Scan Report: sysadmin-whatapp.hl.cn

Site favicon
Submitted: Jul 4, 2026, 2:11:19 PMCompleted: Jul 4, 2026, 2:12:51 PMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 3 countries across 5 domains to perform 2 HTTP transactions. The main domain is sysadmin-whatapp.hl.cn and was registered NaN years ago.

Submitted URL: http://sysadmin-whatapp.hl.cn/

AI Security Verdict

Low Risk

Confidence: 75%

3
Risk Score

Moderate risk due to a brand‑new domain and obfuscated scripts, but no phishing or malware indicators present.

Risk Factors
Newly registered domain (2 days old)
Circular redirect (potential malicious history)
Highly obfuscated JavaScript
Safety Factors
Self‑branding only, no impersonation of another brand
No forms collecting credentials or payment data
No Indicators of Compromise, YARA matches, or IDS alerts
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

sysadmin-whatapp.hl.cn

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(79%)

Domain Information

You're looking at domain 'sysadmin-whatapp.hl.cn' on the Chinese country-code top-level domain (.hl.cn) with no subdomain. The registrable portion 'sysadmin-whatapp' spans 16 characters split between 4 vowels and 11 consonants; it also includes one hyphen. It segments into 5 words: s, ys, admin, what, app. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://sysadmin-whatapp.hl.cn/

Page Load Overview

8.15s
Total Load Time
3
HTTP Requests
1
Domains
N/A
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:762 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software79% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
79%
documentation technical
55%
adult content
41%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.208.68.88Azure · CLOUDHong Kong, Hong Kong
AS8075Microsoft Corporation
054.73.253.240Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
087.248.119.251United Kingdom
AS203220Yahoo-UK Limited
034.251.86.25Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
34--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EE048F77329A063986558498E05B430D9F20B143F50AC9BC79BCBAD9BFDED06107BB78

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:q/Qho9PKBb9Js3q9Jzbs6tlg1ySBKwdQ9gcoIsPG2bMy8OldT:LhoC9JSqzzbs6okSjggcpsO2eAV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:187935:YwBIzJcQYAIGCwVmOFcKA0BBCiAGCCgkZaWSAABgKAQFqGiqACFUIWFXwMABZIzqhEBHQwlI49ZEEJyvZcAEhAoKzEGuqAaA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc7c7c3d3ffffff
Perceptual Hash:b1339acccc93b364
Difference Hash:0018181616000000
Wavelet Hash:3c1c0404033f3333
Color Hash:#79c6d2

Other Hashes

Crop Resistant:0018181616000000

Scan History

Scan history not available

Unable to load historical scan data