Security Scan Report: caoliu1.com

Redirected to:
https://2026-11-05.urldance.com/en?caoliu1.com
Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 4 countries across 8 domains to perform 16 HTTP transactions. The main domain is caoliu1.com and was registered 3 days ago.

Submitted URL: http://caoliu1.com/

Effective URL:
https://2026-11-05.urldance.com/en?caoliu1.com
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Gateway page on a throwaway redirect domain that harvests a password through a disguised, Unicode-obfuscated field and blocks DevTools. No legitimate site identity; do not submit any password.

Risk Factors (6)
Disguised password field (text input masquerading as a password capture)
Password collection without any username/account context — harvesting pattern
Unicode confusion / mixed-script evasion in the form
JavaScript anti-analysis: DevTools and view-source blocked
Redirect to an unrelated, date-themed subdomain with no established reputation
Content-free gateway page that solicits a password to reveal links
Domain age information unavailable

Details

Page Title

Latest @ Sites

Scan Type

public

Domain Name Analysis

Domain 'caoliu1.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The core label 'caoliu1' covers 7 characters containing four vowels alongside two consonants, along with one digit. Splitting it apart reveals 3 words: cao, liu, 1. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://caoliu1.com/

Page Load Overview

1.16s
Total Load Time
127 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:x-default
Text Length:272 chars
Detector Agreement:100%
Language mismatch: Declared as x-default but detected as en

Website Classification

Primary Category

social media network82% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
82%
news media journalism
53%
documentation technical
50%
technology software
46%
healthcare medical
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4156.225.108.42Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1156.225.108.41Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
143.174.247.36Singapore
1117.187.133.33China
AS138407The Internet Data Center of Guizhou Mobile Communication Company Limited
143.169.95.124Singapore
114.215.182.140China
AS4134Chinanet
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1156.225.108.43Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
1112.46.240.46China
AS9808China Mobile Communications Group Co., Ltd.
1613--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18DC1D66B6AE54D361367C1C92576FB0CAAB6D40BDA0BC804B1FCB9841FCBFD24813A54

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:CdEnw8/0oYIiCoQvNNXLUJtZ0nDETs2gmwj:CdCYo1sb4x2hwj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5928:MRGANQgzcgAMEGYQAAgOAgBUYZIAEGgkgAmAFVoOAKwMAMANSK8KEAAMQBEACoglRARAgErF6WYiAEswBmQQCCBMMAAQHIQA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181818181800
Perceptual Hash:cc9b332666cc9933
Difference Hash:0c32b2b2b2b2324c
Wavelet Hash:f8f8d8d8d8d8d8c0
Color Hash:#7987d2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data