Security Report: tyhcsza.cfd - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fa35ba3d-31f3-49a7-9e02-4deb3ffc19f3 Domain and IP registration (RDAP)/api/v1/rdap/fa35ba3d-31f3-49a7-9e02-4deb3ffc19f3How often this domain was scanned/api/v1/domain/stats/tyhcsza.cfd Scan history for this domain/api/v1/domain/history/tyhcsza.cfd?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is tyhcsza.cfd and was registered 1 month ago.

Submitted URL: https://tyhcsza.cfd/

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

35-day-old unranked domain flagged by two threat feeds as a stealer host; the page poses as a file-sharing service and pushes a password-protected 'SETUP_LAUNCHER' download — do not open it.

Risk Factors (5)

Threat-intelligence match naming the primary domain as a stealer malware host (2 corroborating feeds)

Download-link delivery page for a password-protected executable/archive distributed via a third-party file host

Obfuscated download URL and archive password used to evade scanning

Right-click/context-menu blocking in page JavaScript

Random-looking domain with no reputation, registered 35 days ago

Domain age information unavailable

Details

Page Title

CloudConnect - Copy Link

Scan Type

public

Domain Name Analysis

Within the .cfd top-level domain, 'tyhcsza.cfd' is registered without a subdomain. Its registrable label 'tyhcsza' stretches across 7 characters split between one vowel and six consonants. It segments into 4 words: ty, hc, sz, a. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.55s

Total Load Time

4 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:300 chars

Detector Agreement:100%

Website Classification

Primary Category

download file sharing96% confidence

Type: static

Method: ml+structural

All Detected Categories

download file sharing

96%

technology software

62%

documentation technical

42%

cryptocurrency blockchain

30%

phishing/scam

20%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	104.21.32.163Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.152.224Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	2	-	-

Detected Technologies3

HTTP/3

40%

Cloudflare Bot Management

40%

Cloudflare

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1341284A356B31470B51BE8A92FA79B067529A403D00ACD183F8C53CC8FC55D5DEA3B9D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:+NKhci+VA7KDrZFQFLXxC6/uHw9bUDn7gIBqxRd7jRaceYfiSCLC:GskVAdF1V9bUDnUPLxiPC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9381:BxEEBjYAYJgVA6ygMEAaSoyrQgsQmI5yiADMAIoBQ9EKQgFAmB0wgsyEq1YZjQoAUCBsGEwwhQ4iCMRoUJAQKh5YASGAMJQa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000303c3c380000

Perceptual Hash:ce6631999a646c9b

Difference Hash:1020606869701000

Wavelet Hash:003c3c3c3c3c3c0c

Color Hash:38018000c00

Other Hashes

Crop Resistant:1020606869701000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: tyhcsza.cfd