Security Scan Report: 670126.com

Redirected to:
https://hn21s56v.com.ad16da.uwyeukjnd8dfdf32e.com:3443/qianheng/#/page...
Submitted: Sep 24, 2026, 4:42:34 PMCompleted: Sep 24, 2026, 4:44:22 PMpubliccompleted

This website contacted 5 IPs in 4 countries across 5 domains to perform 52 HTTP transactions. The main domain is hn21s56v.com.ad16da.uwyeukjnd8dfdf32e.com and was registered 4 months ago.

Submitted URL: http://670126.com/

Effective URL:

https://hn21s56v.com.ad16da.uwyeukjnd8dfdf32e.com:3443/qianheng/#/page...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

5
Risk Score

Unranked finance/trading page reached via cross-domain redirect with random-string host and card-based deposit instructions. No forms, malware, IoC or IDS hits, so it stays moderate risk — but do not send money or credentials.

Risk Factors
Cross-domain redirect from 670126.com to a random-string nested host unrelated to the advertised brand
Financial trading platform hosted on an unranked domain that does not match the 'official website' it advertises
Funding via per-transaction bank card numbers issued through customer service (untransparent payment routing)
Safety Factors
No credential, password or payment form fields present in the DOM
No Indicators of Compromise matches against the page or its resources
No JavaScript malware patterns, no obfuscation with network sink, no credential exfiltration detected
No network IDS alerts and no cross-origin credential submission
Static informational landing page with no data-collection mechanism captured
Domain age information unavailable

Details

Page Title

首页

Scan Type

public

Domain Name Analysis

The domain name '670126.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label '670126' stretches across 6 characters holding zero vowels versus 0 consonants, notching six digits. Word splitting yields one word: 670126. Median word length is 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://670126.com/

Page Load Overview

75.07s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:2,241 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking86% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
86%
corporate business
76%
technology software
75%
gambling betting
72%
documentation technical
56%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1235.221.248.245Google · CDNTaipei, Taipei City, Taiwan
AS396982Google LLC
1069.165.64.221Hong Kong
AS62468VpsQuan L.L.C.
1035.236.153.252Google · CDNTaipei, Taipei City, Taiwan
AS396982Google LLC
10163.181.254.191United States
AS24429Zhejiang Taobao Network Co.,Ltd
10124.174.83.118China
AS137718Beijing Volcano Engine Technology Co., Ltd.
525--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17D1110C31861A44C03608692A5EED11F4ADA09B8DE518D603CDC27FD8FA4F4DCDAB844

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hrp1ktbCLHbgxXBuNYcNz+XBuNYPOfR+5Q7U8dwNVI:tTqbCLHMZBu6cYBu6PUI5Q7U8Kw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:939:AAIAAAEAAAAAAAQAAAgAAAAAgAAAABgAABBAAEAAEACAAAAAACAgAAIIAAAAAAAAAAAAAAACIAEEAAAAAAAAAAIAAAAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe0c4bd2d05ffff
Perceptual Hash:b349cc238f9e3296
Difference Hash:71d35c5959dd4d00
Wavelet Hash:ff40042c0504ffff
Color Hash:#6ce0e0

Scan History

Scan history not available

Unable to load historical scan data