Security Scan Report: k579c97.top

Redirected to:
https://2026-11-06.urldance.com/en?k579c97.top
Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 4 countries across 8 domains to perform 17 HTTP transactions. The main domain is k579c97.top and was registered 3 days ago.

Submitted URL: http://k579c97.top/

Effective URL:
https://2026-11-06.urldance.com/en?k579c97.top
Redirected

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Unranked redirect destination hosting a password-gated 'latest links' page whose only input is a disguised, username-less password field with Unicode evasion and DevTools blocking — a credential-harvesting pattern, not a real login.

Risk Factors (7)
Disguised password field (text input with password placeholder) - critical harvesting indicator
Password field with no accompanying username/email field
Unicode confusion / mixed-script evasion in form fields
JavaScript blocks DevTools and view-source shortcuts
Off-domain redirect from k579c97.top to the unranked urldance.com, whose age and reputation are unknown
Password-gated 'latest links' aggregator content with no operator identity, ownership or policy pages
HIGH IDS alerts for *.top domain traffic (hostile TLD reputation)
Domain age information unavailable

Details

Page Title

Latest @ Sites

Scan Type

public

Domain Name Analysis

The domain name 'k579c97.top' uses the .top top-level domain with no subdomain. The registrable portion 'k579c97' spans 7 characters with 0 vowels and 2 consonants, plus 5 digits. Splitting it apart reveals four words: k, 579, c, 97. Average segment length settles at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://k579c97.top/

Page Load Overview

0.80s
Total Load Time
130 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:x-default
Text Length:272 chars
Detector Agreement:100%
Language mismatch: Declared as x-default but detected as en

Website Classification

Primary Category

social media network82% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
82%
news media journalism
53%
documentation technical
50%
technology software
46%
healthcare medical
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6156.225.108.41Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1156.225.108.42Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
143.174.246.36Singapore
136.150.90.74China
AS56046China Mobile communications corporation
143.174.247.36Singapore
143.169.95.124Singapore
114.215.183.79China
AS4134Chinanet
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1156.225.108.43Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
1712--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T186C1D66AAAE54D36136781C92076FB0DB6B6D40BDA0BC804B1FCB9801FCBFD14813A94

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:CdEnw8/0oYIiCouJGINNqLUJtZ04nDETs2gmwj:CdCYopwIzbWGx2hwj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5931:uZECIAgzMCFIQBISAFgKCwBBIIYAQGiAgACAEEMMIKYJAkAECKoKBIyEAAEAQowFUIBkjEjVSmYjBcQRJmASiJAlFAQgBJZC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f0f8f8f8d8d88080
Perceptual Hash:dde323c066cc9933
Difference Hash:000232323232320c
Wavelet Hash:f8f8f8f8d8d89880
Color Hash:#1f937a

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data