Security Scan Report: mi.hnshuiji.com

Submitted: Mar 18, 2026, 5:23:44 PMCompleted: Mar 18, 2026, 5:25:08 PMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is mi.hnshuiji.com and was registered NaN years ago.

Submitted URL: https://mi.hnshuiji.com/?token=Non0vMBUuMC1TwzZbezLvMCJTMCH52Aa

AI Security Verdict

High Risk

Confidence: 95%

8
Risk Score

Page harvests credentials via JavaScript; classified as credential phishing.

Risk Factors
Credential exfiltration via JavaScript
Password field present on a non‑trusted domain
Unranked domain with phishing behavior
Domain age information unavailable

Details

Page Title

空间升级

Scan Type

public

Language

🇨🇳

Chinese

(60% confidence)

Category

documentation technical

(87%)

Domain Information

Within the commercial generic top-level domain (.com), 'mi.hnshuiji.com' is registered with subdomain 'mi'. The second-level label 'hnshuiji' is 8 characters long split between three vowels and 5 consonants. Segmentation suggests three words: hn, shui, ji. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mi.hnshuiji.com/?token=Non0vMBUuMC1TwzZbezLvMCJTMCH52Aa

Page Load Overview

4.31s
Total Load Time
4
HTTP Requests
1
Domains
N/A
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Language Code:zh
Detection Confidence:60%
Script Type:Han
HTML Lang Attribute:zh-CN
Text Length:222 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical87% confidence
Type: webapp
Method: ml+structural

All Detected Categories

documentation technical
87%
technology software
66%
cryptocurrency blockchain
65%
healthcare medical
59%
adult content
57%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2104.21.48.97United States
AS13335Cloudflare, Inc.
2172.67.183.199United States
AS13335Cloudflare, Inc.
42--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10642449A59B314A5BD13E4FD17F7474632A48003C40EC9543FAC678C8F8E9C6A963B9E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:IvvV0/LTGZiku30qeMbyJg5+DU4x1vlJT7eomQREZm:I1XyUD0m

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12994:wFQJkQtRIoQiAQQBUoGGFACw5zYSNDC5K7k6E6ETIY4oKqHBRmC5nAAMADgWAULqUCARYAAEGSCpAyAWogQBRQIIQqQCDUkw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c3cffffffff
Perceptual Hash:9616246db94e4e9b
Difference Hash:86e461791a661f06
Wavelet Hash:00003c2ccff3c7ff
Color Hash:#862d55

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data