Security Report: api.qh88eu.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fde42959-69e0-481d-9e0c-4d36a583b4ca Domain and IP registration (RDAP)/api/v1/rdap/fde42959-69e0-481d-9e0c-4d36a583b4caHow often this domain was scanned/api/v1/domain/stats/api.qh88eu.com Scan history for this domain/api/v1/domain/history/api.qh88eu.com?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 5 HTTP transactions. The main domain is qh88eu.com and was registered 1 year 11 months ago.

Submitted URL: https://api.qh88eu.com

AI Security Verdict

High Risk

Confidence: 72%

Risk Score

Content malware Indicator of Compromise on the primary domain (Remcos RAT, single-source unverified) forces HIGH_RISK; page itself was hidden behind a Cloudflare block wall, so no page evidence can clear it.

Risk Factors (3)

Indicators of Compromise: primary domain flagged as Remcos malware (single-source, unverified)

Endpoint-style 'api' subdomain under a gaming/betting brand namespace, consistent with C2 or backend abuse infrastructure

No domain reputation (unranked in Cisco Umbrella top 1M)

Domain age information unavailable

Details

Page Title

Attention Required! | Cloudflareother network

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'api.qh88eu.com' is registered; it also runs on subdomain 'api'. The second-level label 'qh88eu' is 6 characters long containing 2 vowels alongside 2 consonants, along with 2 digits. Splitting it apart reveals 3 words: qh, 88, eu. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.