Security Scan Report: guoyaxue.top

Redirected to:
https://2026-11-08.urldance.com/en?guoyaxue.top
Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 4 countries across 8 domains to perform 15 HTTP transactions. The main domain is guoyaxue.top and was registered 1 week ago.

Submitted URL: https://guoyaxue.top/

Effective URL:
https://2026-11-08.urldance.com/en?guoyaxue.top
Redirected

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Unranked redirect-host page gates 'latest links' behind a disguised password field, with Unicode field evasion, DevTools blocking and a cross-domain redirect — evasion-heavy credential collection with no legitimate brand or account context.

Risk Factors (6)
Disguised password field (type='text' with password placeholder) — form obfuscation
Unicode/mixed-script confusion detected in form fields
DevTools and right-click source-viewing blocked by JavaScript
Password-only collection form with no username field
Single cross-domain redirect to a different registrable domain (urldance.com) used to serve the actual page
Suricata HIGH alerts for .top domain traffic
Domain age information unavailable

Details

Page Title

Latest @ Sites

Scan Type

public

Domain Name Analysis

The domain 'guoyaxue.top' uses the .top top-level domain with no subdomain. The second-level label 'guoyaxue' is 8 characters long holding five vowels versus 3 consonants. Word splitting yields three words: guo, ya, xue. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

© | Atuid 2 Type @site name, e.g. @baidu P Get the latest password [eYoointthe'xuntei group fceccin)) Enter the password to access the latest links & Updated daily

Page Load Overview

1.52s
Total Load Time
115 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:x-default
Text Length:272 chars
Detector Agreement:100%
Language mismatch: Declared as x-default but detected as en

Website Classification

Primary Category

social media network82% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
82%
news media journalism
53%
documentation technical
50%
technology software
46%
healthcare medical
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4156.225.108.43Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
1104.21.55.141Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1156.225.108.41Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
143.174.247.36Singapore
1125.74.108.43China
AS141998China Telecom
143.174.246.36Singapore
143.169.95.124Singapore
1111.45.11.83China
AS9808China Mobile Communications Group Co., Ltd.
1172.67.148.242Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1156.225.108.42Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
1512--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15FC1D66BAAE54D36136781892176FB0DAAB6D40BDA0BC804B1FCB9801FCBFD54813A54

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:CdEnw8/0oYIiCoDmNN+LUJtZxnDETs2gmwj:CdCYornb3x2hwj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5928:MRGEJQgzcgAIEGYQAAgOAgBQYZIAAGgkgAmAFVoMAKwIAMANSK8KAAAMABECCoglRARAgErF6WYiCEswBmQQACBMNAAQDIQA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e0d8b89898181800
Perceptual Hash:dcc133e266cc9933
Difference Hash:003232323232320c
Wavelet Hash:f8f8f8f8d8d89880
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data