ScanMalware.com

Security Scan Report: h428.lat

Redirected to: https://web.hggj.live/hg/

Submitted: Oct 25, 2025, 1:06:46 AMCompleted: Oct 25, 2025, 1:07:57 AMpubliccompleted
Loading additional data...

Summary

This website contacted 32 IPs in 3 countries across 7 domains to perform 119 HTTP transactions. The main domain is web.hggj.live and was registered NaN years ago.

Submitted URL: http://h428.lat/

Effective URL: https://web.hggj.live/hg/Redirected

AI Security Verdict

High Risk

Confidence: 95%

10
Risk Score

Site shows URL manipulation and multiple redirects on a very new unranked domain – high risk, likely phishing.

Risk Factors
URL manipulation (history.pushState spoofing)
Excessive redirects (4)
Very new domain (13 days old)
Domain change to unrelated host
Unranked domain with low reputation
Domain age information unavailable

Details

Page Title

皇宫国际

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

suspicious phishing

(57%)

Domain Information

The domain 'h428.lat' uses the .lat top-level domain with no subdomain. Count 4 characters in 'h428' holding zero vowels versus one consonant, notching 3 digits. Segmentation suggests two words: h, 428. The median word length lands at 2 characters. Most frequently, 'h' shows up in Breton. Usage also turns up in Chinese (Zhuyin) and Hungarian contexts. Net impression: Breton phrase with character flair.

Screenshot

Security scan screenshot of http://h428.lat/

Page Load Overview

18.52s
Total Load Time
119
HTTP Requests
7
Domains
40 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:138 chars
Detector Agreement:100%

Website Classification

Primary Category

suspicious phishing57% confidence
Type: static
Method: ml+structural

All Detected Categories

suspicious phishing
57%
other
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2638.182.238.157United States
AS140224NEBULA
3154.23.151.62Hong Kong, Hong Kong
AS140224NEBULA
3154.23.151.48Hong Kong, Hong Kong
AS140224NEBULA
334.92.18.179Hong Kong, Hong Kong
AS396982GOOGLE-CLOUD-PLATFORM
338.182.238.156United States
AS140224NEBULA
3154.23.151.60Hong Kong, Hong Kong
AS140224NEBULA
3154.23.151.47Hong Kong, Hong Kong
AS140224NEBULA
3154.23.151.61Hong Kong, Hong Kong
AS140224NEBULA
3111.231.169.247Shanghai, Shanghai, China
AS45090Shenzhen Tencent Computer Systems Company Limited
3154.23.151.46Hong Kong, Hong Kong
AS140224NEBULA
11932--

Detected Technologies1

Vue.js
30%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data