Security Scan Report: 126260.xyz

Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 42 domains to perform 55 HTTP transactions. The main domain is 126260.xyz and was registered 1 year 7 months ago.

Submitted URL: https://126260.xyz

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Compromised Chinese navigation directory carrying two analyst-vetted ClearFake components: a Polygon smart-contract loader staging a ClickFix chain plus a rival-kit cleanup script that blocks navigation. Avoid visiting.

Risk Factors (5)
Known malicious kit injected into the page (ClearFake Polygon contract loader, analyst-vetted roster match)
Second ClearFake component (rival-kit cleanup / navigation blocking) also present
Primary domain flagged as an unknown malware loader in threat intelligence
Cross-origin beacon to unranked seo-solutions.eu.cc endpoint
Site appears compromised: benign Chinese navigation-directory content ('我的导航') with no relation to injected payloads
Domain age information unavailable

Details

Page Title

我的导航 | 大胜

Scan Type

public

Domain Name Analysis

The domain '126260.xyz' uses the open generic top-level domain (.xyz) while skipping any subdomain. The core label '126260' covers 6 characters split between zero vowels and zero consonants; bonus characters include six digits. Segmentation suggests 1 word: 126260. No strong language cues emerged from the frequency lists.

Screenshot

Basi @ RH Oza © Phat HE “| BY oe Ss VPS CN2 a m itt it Bl © Wi @ Be & Ai e Ls & esl NE p iii Q HRT @ Bs & ACG oO” @ Bea © GitHub BA « SD eo” @ San ay 8s

Page Load Overview

4.83s
Total Load Time
289 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-Hans
Text Length:334 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
77%
education learning
66%
documentation technical
60%
adult content
50%
cryptocurrency blockchain
25%

Detected Features

Comments
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11104.21.37.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11142.251.127.85Google · CDNUnited States
AS15169Google LLC
11172.67.209.248Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11172.67.216.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11101.37.96.69Hangzhou, Zhejiang, China
AS37963Hangzhou Alibaba Advertising Co.,Ltd.
555--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11283A37292E4442A86A7C6C04C35BB2EFF60F107CD974159B9BC36948F81DF2DA6322D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:bjJjgOb43VvTU4WOZTMfBC7q6Abym7xbpEVZdypa9Brxbn+I6yGqygyEZlOd:XJ/yNWOtA/7xa9ypSrxbn+XqygyEZlg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:87331:IpiQCdwkFICARJQOCbChoBEpMQhIoIHLICOKyCCVwUAxzAysIkAQ1ABbQRguSIIhNbMJE9wNMgEwKYEoSIgBF4koWRICY0FD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00497f7f70117f40
Perceptual Hash:829c7b7e6a916ec0
Difference Hash:019baaaba1a3cb89
Wavelet Hash:004b7f7f70037f41
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data