Security Scan Report: cl260701f64.top

Redirected to:
https://b7334e2fa4acac.top/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 1 country across 5 domains to perform 71 HTTP transactions. The main domain is cl260701f64.top and was registered 4 months ago.

Submitted URL: https://cl260701f64.top/

Effective URL:
https://b7334e2fa4acac.top/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Adult-content mirror page that rotates random .top domains and pushes email/backup-domain evasion. No forms, no malware, no threat-intel hits; risk comes from evasive domain cycling and adult content, not phishing.

Risk Factors (5)
Rapid domain rotation across random .top hostnames to evade blocking, with instructions to keep 5+ backup domains
Cross-domain redirect from cl260701f64.top to unrelated b7334e2fa4acac.top (entry-domain age/reputation does not describe the served page)
Off-site contact via a free Gmail address used to distribute new domains, discouraging any accountability trail
Explicit adult/pornographic material distribution with only a text disclaimer, typical of grey-market mirror sites
Generic IDS alerts flagging .top DNS/HTTP traffic as potentially bad (weak, TLD-level only)
Safety Factors (4)
No credential, login, email or payment form anywhere on the page (verified form facts: all zero)
No JavaScript malware patterns, no obfuscated or exfiltrating scripts, no native-hunting rule high-precision hits
No threat-intelligence Indicators of Compromise against the page or its resources
No known malicious kit in the kit roster; no brand impersonation of a third party for credential theft
Domain age information unavailable

Details

Page Title

欢迎您

Scan Type

public

Domain Name Analysis

Domain 'cl260701f64.top' uses the .top top-level domain and has no subdomain. Its registrable label 'cl260701f64' stretches across 11 characters containing zero vowels alongside 3 consonants, along with 8 digits. Breaking it apart gives 4 words: cl, 260701, f, 64. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Sigil Re aa Strawberry is the trend © She is Bae 84H RAP © HS kale DERMAENS Wes, HA RBERMBMGZ : caoliu9S0@gmail.com AUS ERTL, AA PRIEKA IAAI! MRADATATAAI, BER ( ) BBA, Bae ARAR, B+ / WARNING

Page Load Overview

2.82s
Total Load Time
5.0 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:851 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media50% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
50%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.110.97Google · CDNUnited States
AS15169Google LLC
665.8.131.124Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6216.239.32.36Google · CDNUnited States
AS15169Google LLC
6188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
665.8.131.82Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
665.8.131.55Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
665.8.131.71Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6104.21.48.236Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6216.239.34.36Google · CDNUnited States
AS15169Google LLC
7111--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CD43C527C3490F11F4A9314CD8AB9AC6CA12218C699DA5A447B6FC41DFDEC5EDC63CB8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:xhTjxhAC7CI8ACl+qlcqlHelngmAX++y2kWlJhxZY74XnTa0iCW7GvduHn1VJ3MD:fMSY/SVowy55qzxs1EVMph

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:55746:S5iUSgSohwMUZiqIwucBYENBqghGAFQUgqwKhLEQwEFAMBaYAAoEAHQKBSGCAJIXJgiBIBDKcIQwoZUIQA0GAJh8AJcOAsCA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9d91f1f5f981f3ff
Perceptual Hash:ec5a993d93962692
Difference Hash:3933272b2b272632
Wavelet Hash:9d919191e181e3fb
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data