Security Scan Report: cl260202939.top

Redirected to:
http://www.ad6baa7a62cfdc.top/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 1 country across 5 domains to perform 58 HTTP transactions. The main domain is cl260202939.top and was registered 9 months ago.

Submitted URL: https://cl260202939.top/

Effective URL:
http://www.ad6baa7a62cfdc.top/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Adult-content mirror page on a days-old .top domain that pushes visitors to save multiple rotating URLs and a Gmail contact to dodge blocking. No forms, no credentials, no malware or threat-intel hits; IDS alerts are generic TLD rules. Evasive and low-reputation, but no concrete attack signal.

Risk Factors (4)
Adult content distributed via constantly rotating .top mirror domains explicitly to evade blocking
Page coaches visitors to bookmark at least 5 alternate domains and contact a Gmail address to recover the current URL
Network IDS flagged two HIGH, TLD-based 'likely hostile' alerts for the *.top domain
Entry domain is 15 days old and unranked; page ships an unranked third-party script host (cidxig.cl2603023bd.top) and uses eval() for dynamic code execution
Safety Factors (5)
No credential, login, password or payment fields anywhere on the page
No JavaScript malware hunting-rule matches and no threat-intelligence Indicators of Compromise against the page or its resources
No credential exfiltration; cross-origin traffic is limited to standard Google Analytics/GTM endpoints
Page promotes only its own operation — no impersonation of a separate entity's brand or login page was observed
No known malicious kit in the analyst-vetted kit roster
Domain age information unavailable

Details

Page Title

欢迎您

Scan Type

public

Domain Name Analysis

You're looking at domain 'cl260202939.top' on the .top top-level domain with no subdomain. The core label 'cl260202939' covers 11 characters holding zero vowels versus 2 consonants, plus nine digits. Breaking it apart gives 2 words: cl, 260202939. Median word length is 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Sigil Re aa Strawberry is the trend © She is Bae 84H RAP © HS kale DERMAENS Wes, HA RBERMBMGZ : caoliu9S0@gmail.com AUS ERTL, AA PRIEKA IAAI! MRADATATAAI, BER ( ) BBA, Bae ARAR, B+ / WARNING

Page Load Overview

2.88s
Total Load Time
2.7 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:851 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media50% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
50%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.20.97Google · CDNUnited States
AS15169Google LLC
5172.67.213.212Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
565.8.131.82Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
5216.239.32.36Google · CDNUnited States
AS15169Google LLC
5188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
565.8.131.71Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
565.8.131.55Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
565.8.131.124Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
5216.239.34.36Google · CDNUnited States
AS15169Google LLC
5810--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A843C527C3490F11F4A9314CD8AB9AC6CA12218C699DA5A447B6FC41DFDEC5EDC63CB8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:4nTjxhAC7CI8ACl+qlcqlHelngmAX++y2kWlJhxZY74XnTa0iCW7GvduHn1VJ3Mj:kMSY/SVowy55unxs1EVMph

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:55752:xzAiKs4MEGECKAgEGYITsAGyC0I8LCIAhDjHovEgA5A4CCEBrEkJAECzP4oIEABigYrRImTBggthBAScGSRiDFBCCCJBIwQD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9d91f1f5f981f3ff
Perceptual Hash:ec5a993d93962692
Difference Hash:3933272b2b272632
Wavelet Hash:9d919191e181e3fb
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data