Security Scan Report: cl26010181a.top

Redirected to:
http://www.ad6baa7a62cfdc.top/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 1 country across 5 domains to perform 58 HTTP transactions. The main domain is cl26010181a.top and was registered 10 months ago.

Submitted URL: https://cl26010181a.top/

Effective URL:
http://www.ad6baa7a62cfdc.top/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Adult site domain-rotation notice pushing users to save alternate random .top domains via email. No forms, no credential or payment collection, no malware or phishing indicators — but disposable, block-evading infrastructure and explicit content warrant caution.

Risk Factors (4)
Adult/age-restricted content distributed through constantly rotating, random-looking .top domains explicitly to evade blocking and takedown
Obfuscated, disposable infrastructure (random hex subdomains, cross-domain redirect chain, email-on-request domain list) with no stable brand or verifiable operator
Unranked third-party script host cidxig.cl2603023bd.top loaded on a very new domain
One eval() dynamic code execution call present in page scripts
Safety Factors (4)
No forms of any kind: no login, password, or payment fields, so no credential or card harvesting is possible on this page
No brand impersonation of a third-party organisation — the page advertises its own domain line-up, it does not dress up as another company
No JavaScript malware patterns, no native hunting-rule hits, no known-kit match, and no threat-intelligence indicators against the page or its resources
Analytics traffic only to region1.google-analytics.com / googletagmanager.com, standard legitimate endpoints
Domain age information unavailable

Details

Page Title

欢迎您

Scan Type

public

Domain Name Analysis

The domain name 'cl26010181a.top' uses the .top top-level domain while skipping any subdomain. The second-level label 'cl26010181a' is 11 characters long with 1 vowel and 2 consonants, along with 8 digits. It segments into 3 words: cl, 26010181, a. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Sigil Re aa Strawberry is the trend © She is Bae 84H RAP © HS kale DERMAENS Wes, HA RBERMBMGZ : caoliu9S0@gmail.com AUS ERTL, AA PRIEKA IAAI! MRADATATAAI, BER ( ) BBA, Bae ARAR, B+ / WARNING

Page Load Overview

3.48s
Total Load Time
2.7 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:851 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media50% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
50%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14104.21.34.121Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.20.97Google · CDNUnited States
AS15169Google LLC
4104.21.48.236Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
465.8.131.82Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4216.239.34.36Google · CDNUnited States
AS15169Google LLC
4172.67.160.186Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
465.8.131.55Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
465.8.131.71Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
465.8.131.124Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
5812--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AE43C527C3090F11F4A9314CD8AB9AC6CA12618C699DA5A447B6FC41DFDEC5EDC63CB8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:YOTjxhAC7CI8ACl+qlcqlHelngmAX++y2kWlJhxZY74XnTa0iCW7GvduHn1VJ3MT:PMSY/6Voky55mzxs1EVMph

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:55746:kw30EJCvNzCEoAAJECjAYhMWIhJLQC2BnA8ALAAiPkRBFDuYABAg5JysQjqgiDSIo8tIBAIEQKQRoiEBGe3gCEEEMDBQgIUG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9d91f1f5f981f3ff
Perceptual Hash:ec5a993d93962692
Difference Hash:3933272b2b272632
Wavelet Hash:9d919191e181e3fb
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data