Security Scan Report: s579c53.top

Redirected to:
https://2026-11-06.urldance.com/en?s579c53.top
Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 4 countries across 8 domains to perform 15 HTTP transactions. The main domain is s579c53.top and was registered 3 days ago.

Submitted URL: http://s579c53.top/

Effective URL:
https://2026-11-06.urldance.com/en?s579c53.top
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Redirect lands on a date-rotating subdomain serving a 'verify the password' gate with a disguised orphan password field, Unicode confusion and DevTools blocking; no brand impersonation or exfiltration was confirmed, but the combination is unsafe.

Risk Factors (6)
Disguised password field (type='text' with password placeholder) on a page that demands a password
Password field with no username/email field — suspicious credential-collection pattern
Unicode confusion / mixed-script characters in form fields
Anti-analysis JavaScript blocking DevTools shortcuts
Redirect chain from a random-looking .top domain to a date-stamped subdomain of an unrelated domain (infrastructure that rotates)
Destination domain not ranked in Cisco Umbrella; legitimacy indicators minimal
Domain age information unavailable

Details

Page Title

Latest @ Sites

Scan Type

public

Domain Name Analysis

The domain 's579c53.top' uses the .top top-level domain with no subdomain. The core label 's579c53' covers 7 characters holding 0 vowels versus 2 consonants, notching 5 digits. Word splitting yields four words: s, 579, c, 53. Expect 1.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://s579c53.top/

Page Load Overview

1.25s
Total Load Time
115 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:x-default
Text Length:272 chars
Detector Agreement:100%
Language mismatch: Declared as x-default but detected as en

Website Classification

Primary Category

social media network82% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
82%
news media journalism
53%
documentation technical
50%
technology software
46%
healthcare medical
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5156.225.108.41Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
1104.21.87.151Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1156.225.108.42Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
143.174.246.36Singapore
1106.74.32.242China
AS133118China Unicom IP network
143.169.95.124Singapore
1111.45.3.198China
AS9808China Mobile Communications Group Co., Ltd.
143.174.247.36Singapore
1156.225.108.43Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
1120.52.95.244China
AS133119China Unicom IP network
1511--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DEC1D56B6EE54E36136781C92176F70DAAB6C40BDA0BC904B1FCB9801FCBFD64813A54

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:CdEnw8/0oYIiCoG2SNNBCLUJtZKnDETs2gmwj:CdCYo1Vbmx2hwj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5930:cTEAoAEjcAIIAYIADAAaAkBAJBIAAG1AEACAEGoMCKQJykEECIgLAAB0QARAQoxFQABBkEjFTGIiEkCDBvAUABIEEBgAJJSA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:01091f1b1f1f1f0f
Perceptual Hash:8c1d337666cc9933
Difference Hash:fff3b3b3f3b3f3ff
Wavelet Hash:01191b1b1f1f1f1f
Color Hash:#409fbf

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data