Security Scan Report: data.cqna.gov.cn

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is cqna.gov.cn and was registered 23 years ago.

Submitted URL: https://data.cqna.gov.cn/vr/jiedao/ns/tour.html?xml=data%3Avideo%2Fmp4%3Bbase64%2CPGtycGFubz48aW5jbHVkZSB1cmw9Ii9cL2ZyYW5jaXNqaGFycmlzby5naXRodWIuaW8vc29uYS9zb25hcnNlbGUueG1sIi8+PC9rcnBhbm8+&id=video-trabzonspor-vs-alanyaspor-live-free-live-streams-espn-broadcasting-618-67d5r3ie

AI Security Verdict

Moderate Risk

Confidence: 68%

5
Risk Score

Aged Chinese government host with no forms or malware, but the URL is injected with spam keywords and a base64 krpano include pointing to an unrelated GitHub Pages file — signs of parasite SEO abuse, not a phishing page.

Risk Factors (3)
Government domain URL abused with injected spam-keyword identifier and an off-site krpano XML include
Page loads configuration from an unrelated personal GitHub Pages account rather than a first-party asset
Visible page is a non-functional panorama error, consistent with an abandoned/injected page rather than a real service
Safety Factors (4)
Domain is 23 years old and belongs to a Chinese government (Nan'an District, Chongqing) host
No forms, no credential or payment collection
No Indicators of Compromise matches, no hunting rule malware, no IDS alerts, no known malicious kit
All page scripts come from the site's own domain; no credential exfiltration detected
Domain age information unavailable

Details

Page Title

南岸区街镇全景图

Scan Type

public

Domain Name Analysis

Within the Chinese country-code top-level domain (.gov.cn), 'data.cqna.gov.cn' is registered; it also runs on subdomain 'data'. The core label 'cqna' covers 4 characters with one vowel and three consonants. Breaking it apart gives two words: cq, na. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://data.cqna.gov.cn/vr/jiedao/ns/tour.html?xml=data%3Avideo%2Fmp4%3Bbase64%2CPGtycGFubz48aW5jbHVkZSB1cmw9Ii9cL2ZyYW5jaXNqaGFycmlzby5naXRodWIuaW8vc29uYS9zb25hcnNlbGUueG1sIi8+PC9rcnBhbm8+&id=video-trabzonspor-vs-alanyaspor-live-free-live-streams-espn-broadcasting-618-67d5r3ie

Page Load Overview

8.22s
Total Load Time
159 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:88 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software87% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
87%
entertainment media
87%
documentation technical
68%
government
48%
real estate property
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2183.64.61.181China
AS4134Chinanet
2221.7.113.13China
AS4837CHINA UNICOM China169 Backbone
42--

Detected Technologies2

Nginxv1.28.0
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1362133938AD2B00EF12607146881B5CC46459848B386DA989C9579BFDCCD9E5C0A32F4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:kPESONYPuOa7Rs15JRn0J5/FRNi+aVFcBR8xkSQM:8g6Pue1189vqc3SQM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1132:AgBAAAAAAARACAAgAAAAAAAAAAAAABhAAIAAAAAAAAAAAAAAAAAAAAABAAwIgAAAAAAIACACjAUAAAAAAAAMgBAAQABAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000001818000000
Perceptual Hash:cc6433d9cc663399
Difference Hash:0000003030000000
Wavelet Hash:000000183c3c0000
Color Hash:N/A

Other Hashes

Crop Resistant:0000003030000000

Scan History

Scan history not available

Unable to load historical scan data