Security Scan Report: shengming.usdtpay.art

Redirected to:
https://shengming.usdtpay.art/?tr_uuid=20260719-0651-5231-a403-d648336...
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 2 countries across 11 domains to perform 29 HTTP transactions. The main domain is usdtpay.art and was registered 1 year 3 months ago.

Submitted URL: https://shengming.usdtpay.art

Effective URL:
https://shengming.usdtpay.art/?tr_uuid=20260719-0651-5231-a403-d648336...
Redirected

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

The site shows high JavaScript obfuscation and lacks reputation, but no credential collection or malware indicators; treat as moderate risk.

Risk Factors (3)
Obfuscated JavaScript (high entropy, extensive concatenation)
Unranked domain with low reputation
Finance‑related theme on a newly observed domain
Safety Factors (5)
No forms collecting credentials or payment data
No Indicators of Compromise matches
No JavaScript malware YARA detections
No network IDS alerts
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

usdtpay.artother network

Scan Type

public

Domain Name Analysis

Within the .art top-level domain, 'shengming.usdtpay.art' is registered; it also runs on subdomain 'shengming'. The second-level label 'usdtpay' is 7 characters long containing two vowels alongside 5 consonants. It segments into 3 words: usd, t, pay. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://shengming.usdtpay.art

Page Load Overview

2.34s
Total Load Time
336 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:57%
Script:Latin
Direction:ltr

Detection Details

Text Length:109 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking59% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
59%
adult content
39%
cryptocurrency blockchain
26%
phishing scam
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15103.224.212.106Australia
AS133618Trellian Pty. Limited
1454.192.35.85Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
292--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18151111724E2102690A2A0549FF3B6792177619B308CCCA93ECD47245F9779BC5633D8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:rNK0Dc0lUu6IUyu3M6G/DpAr6HXOhpGI0DApliG6Y3JK34pMq3M6m5BdIvBPxiLo:cKdUuFUyu8rU63+U4IV+z8p5BdIvB5i0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2852:AAgAAIMAAIAHQkBGAACEICAAAwAQABCACIQAADAUEAAAAAEKgCAABQMAAhAAgAAIBAQAAqAAAQAYAIACAAgAJoAgvAAAABHA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000c300000000ff
Perceptual Hash:a8609f4a9f4ab365
Difference Hash:71969697b3b3b33b
Wavelet Hash:0042e7e7db1118ff
Color Hash:#bcd279

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data