Security Scan Report: 670269.com

Redirected to:
https://hn21s56v.com.ad16da.uwyeukjnd8dfdf32e.com:3443/qianheng/#/page...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 4 countries across 5 domains to perform 53 HTTP transactions. The main domain is 670269.com and was registered 1 week ago.

Submitted URL: http://670269.com/

Effective URL:
https://hn21s56v.com.ad16da.uwyeukjnd8dfdf32e.com:3443/qianheng/#/page...
Redirected

AI Security Verdict

Low Risk

Confidence: 68%

3
Risk Score

Unlicensed stock-index margin/leverage platform served from a randomized throwaway host on port 3443 after a cross-domain redirect. No credential or payment forms, but deposits are routed to chat-supplied personal bank cards — treat as an investment fraud risk and do not send funds.

Risk Factors (6)
Deceptive hostname: random-looking subdomain chain on non-standard port 3443 used as the final serving host
Cross-domain redirect from an unrelated registrable domain, breaking age/reputation continuity
Unlicensed index/leverage margin-financing (配资) platform marketed to retail users
Payment solicited via customer-service-supplied personal bank card numbers instead of any regulated channel
Multiple rotating brand domains (qhpz.cc / qhyoupei.com / qianhengpeizi.com) with no verifiable operator identity
Domain unranked in Cisco Umbrella (no established reputation)
Safety Factors (6)
No credential, login or payment form fields present in the captured DOM (0 forms, 0 password fields)
No Indicators of Compromise matched against the page or its resources
No YARA JavaScript malware patterns and no native-YARA high-precision hits
No network IDS alerts and no cross-origin credential exfiltration detected
All JavaScript served from the site's own domain (no third-party script hosts)
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

首页

Scan Type

public

Domain Name Analysis

Domain '670269.com' uses the commercial generic top-level domain (.com) with no subdomain. The registrable portion '670269' spans 6 characters holding 0 vowels versus 0 consonants, notching 6 digits. Word splitting yields 1 word: 670269. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://670269.com/

Page Load Overview

6.70s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:2,267 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking87% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
87%
gambling betting
82%
corporate business
78%
technology software
73%
cryptocurrency blockchain
66%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1335.236.153.252Google · CDNTaipei, Taipei City, Taiwan
AS396982Google LLC
869.165.64.222Hong Kong
AS62468VpsQuan L.L.C.
8163.181.58.167Frankfurt am Main, Hesse, Germany
AS24429Zhejiang Taobao Network Co.,Ltd
8124.174.83.126China
AS137718Beijing Volcano Engine Technology Co., Ltd.
834.81.85.81Google · CDNTaipei, Taipei City, Taiwan
AS396982Google LLC
8124.174.83.209China
AS137718Beijing Volcano Engine Technology Co., Ltd.
536--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13B141925B2077E075477D0A4B8D48F1CA926AB3BD3054A2AF758377D9BCF8F05A26384

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:v2dZXEnImKJCU9rBxn/J136UqMil6MsP7e640diJMAv89bv89rplMl+bNJBIOrKD:JkGP3rKBKmdpdmcewT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:195302:RCqKlciJEsxK60EBIBTRA+OqiC2KSDDSQBgiCGgf5HQjIANkgAYAekggAg0NCAyBZAW/QiAwnIlUFCPRAyDBldaDAkAppAZC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c3c3c3c3c00
Perceptual Hash:cf70708fa7969a30
Difference Hash:c3d279696961699e
Wavelet Hash:f0003c3c3c3c3def
Color Hash:#6c7be0

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data