Security Scan Report: tasksgroup.top

Redirected to:
https://tasksgroup.top/dashboard/links/
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is tasksgroup.top and was registered 10 months ago.

Submitted URL: https://tasksgroup.top

Effective URL:
https://tasksgroup.top/dashboard/links/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Private WhatsApp link-management backend with no visitor-facing forms, phishing or malware evidence; flagged for an unprotected hardcoded admin password and an opaque, unranked .top domain.

Risk Factors (3)
Hidden administrative panel with hardcoded plaintext password in client-side script — anyone can edit or delete stored records
Opaque purpose: bulk WhatsApp message-link pools tied to phone numbers, page reads as an admin backend rather than a public service
No legitimacy signals beyond domain age (no organization, contact or policy information); unranked domain on a .top TLD
Safety Factors (5)
No credential, login or payment form present — nothing is collected from visitors
No outbound third-party script hosts and no cross-origin credential exfiltration detected
No Indicators of Compromise, no JavaScript hunting rule malware patterns, no known-kit roster match, no Safe Browsing hit
WhatsApp appears as the platform whose links are managed, not as an impersonated brand; self-branded 'NBLink Tracker' panel
Hosted on standard infrastructure, not cloud storage or IPFS
Domain age information unavailable

Details

Page Title

链接管理 - WhatsApp <script> function editPhone(el){if(el.querySelector("input"))return; var orig = el.textContent.trim(); var inp = document.createElement("input"); inp.value = orig; inp.style.cssText = "font-size:16px;font-weight:700;color:#25D366;border:1px solid var(--primary);border-radius:3px;padding:1px 4px;width:160px;outline:none"; inp.onblur = function() { var np = inp.value.trim(); if (np && np !== orig) { var pw = prompt("请输入密码保存修改:"); if (!pw || pw !== "525484") { alert("密码错误,未保存"); el.textContent = orig; return; } var id = el.getAttribute("data-num-id"); var x = new XMLHttpRequest(); x.open("POST", "/number/" + id + "/update-phone/"); x.setRequestHeader("Content-Type", "application/json"); x.setRequestHeader("X-CSRFToken", document.querySelector("input[name=csrfmiddlewaretoken]").value); x.onload = function() { var r = JSON.parse(x.responseText); if (r.ok) { el.textContent = r.phone; el.style.borderColor = "#10b981"; el.style.backgroundColor = "#f0fdf4"; setTimeout(function() { el.style.borderColor = "transparent"; el.style.backgroundColor = "transparent"; }, 1500); } }; x.send(JSON.stringify({phone: np})); } else { el.textContent = orig; } }; el.textContent = ""; el.appendChild(inp); inp.focus(); }function editTarget(el){if(el.querySelector("input"))return;var orig=el.textContent.trim();var inp=document.createElement("input");inp.value=orig;inp.style.cssText="font-size:12px;border:1px solid var(--primary);border-radius:4px;padding:2px 6px;width:300px;outline:none;";inp.onblur=function(){var nu=inp.value.trim();if(nu===orig){el.textContent=orig;return;}var id=el.getAttribute("data-num-id");var x=new XMLHttpRequest();x.open("POST","/number/"+id+"/update-url/");x.setRequestHeader("Content-Type","application/json");x.setRequestHeader("X-CSRFToken",document.querySelector("input[name=csrfmiddlewaretoken]").value);x.onload=function(){var ok=false,url="";try{var r=JSON.parse(x.responseText);ok=r.ok;url=r.url;}catch(e){}if(ok){if(!nu){reloadKeep();return;}el.textContent=url||nu;el.style.color="#10b981";setTimeout(function(){el.style.color="#2563eb";},1200);}else{el.textContent=orig;}};x.send(JSON.stringify({url:nu}));};el.textContent="";el.appendChild(inp);inp.focus();} function editName(el) { if (el.querySelector("input")) return; var orig = el.textContent.trim(); var inp = document.createElement("input"); inp.value = orig; inp.style.cssText = "font-size:13px;border:1px solid var(--primary);border-radius:4px;padding:2px 6px;width:120px;outline:none;"; inp.onblur = function() { var newName = inp.value.trim(); if (newName && newName !== orig) { var id = el.getAttribute("data-pool-id"); var xhr = new XMLHttpRequest(); xhr.open("POST", "/pool/" + id + "/rename/"); xhr.setRequestHeader("Content-Type", "application/json"); xhr.setRequestHeader("X-CSRFToken", document.querySelector("input[name=csrfmiddlewaretoken]").value); xhr.onload = function() { var r = JSON.parse(xhr.responseText); if (r.ok) { el.textContent = r.name; el.style.borderColor = "#10b981"; el.style.backgroundColor = "#f0fdf4"; setTimeout(function() { el.style.borderColor = "transparent"; el.style.backgroundColor = "transparent"; }, 1500); } }; xhr.send(JSON.stringify({name: newName})); } else { el.textContent = orig; } }; el.textContent = ""; el.appendChild(inp); inp.focus(); } function deletePool(id) { var pw = prompt("请输入删除密码:"); if (!pw) return; if (pw !== "525484") { alert("密码错误"); return; } if (!confirm("确定删除整个链接组?")) return; var xhr2 = new XMLHttpRequest(); xhr2.open("POST", "/pool/" + id + "/delete/"); xhr2.setRequestHeader("Content-Type", "application/x-www-form-urlencoded"); xhr2.setRequestHeader("X-CSRFToken", document.querySelector("input[name=csrfmiddlewaretoken]").value); xhr2.onload = function() { var r = JSON.parse(xhr2.responseText); if (r.message) { reloadKeep(); } else { alert("删除失败"); } }; xhr2.send(); } function deleteNumber(id) { var pw = prompt("请输入删除密码:"); if (!pw) return; if (pw !== "525484") { alert("密码错误"); return; } if (!confirm("确定删除此号码?")) return; var xhr = new XMLHttpRequest(); xhr.open("POST", "/number/" + id + "/delete-pw/"); xhr.setRequestHeader("Content-Type", "application/x-www-form-urlencoded"); xhr.setRequestHeader("X-CSRFToken", document.querySelector("input[name=csrfmiddlewaretoken]").value); xhr.onload = function() { var r = JSON.parse(xhr.responseText); if (r.ok) { reloadKeep(); } else { alert("错误: " + r.error); } }; xhr.send("password=" + encodeURIComponent(pw)); } </script>

Scan Type

public

Domain Name Analysis

The domain name 'tasksgroup.top' uses the .top top-level domain while skipping any subdomain. The core label 'tasksgroup' covers 10 characters split between 3 vowels and seven consonants. Breaking it apart gives 2 words: tasks, group. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tasksgroup.top

Page Load Overview

2.14s
Total Load Time
22 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:35%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:11,295 chars
Detector Agreement:100%
Language mismatch: Declared as zh-CN but detected as en

Website Classification

Primary Category

forum40% confidence
Type: dynamic
Method: structural

All Detected Categories

forum
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4103.119.17.224Hong Kong, Hong Kong
AS55933Cloudie Limited
41--

Detected Technologies4

Nginxv1.24.0
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11134C8A2F2E21435313680E995556F9BB4807157C2465E14BADEA337EFC68B32A333CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:g/4geUSrvyWU5lQ8Bp/SFNmqcs0485iaoTgtfg+xpx0N37aSnL1MIN56G3CcYz08:oOLqsajOBZU7Mc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:238155:JQaCQBAyeEUESCCpAJZCiRIYilNIJgFBQEhsCAInDZAAASzCA5ZCACU6KTmLmA8JmhaVHSKMZEoMRIMqQNSHABDB2gFohQKl

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f7f7f7f7f7f7f7f
Perceptual Hash:805f5f551c0ebaaa
Difference Hash:f0d0d9d0d8dadad8
Wavelet Hash:001c3f182f2f2f6f
Color Hash:07000e00000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data