Security Scan Report: mi.hengfeng-winery.com

Submitted: Mar 15, 2026, 7:10:27 PMCompleted: Mar 15, 2026, 7:11:57 PMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is mi.hengfeng-winery.com and was registered NaN years ago.

Submitted URL: https://mi.hengfeng-winery.com/?token=mEP02BJ5smXqwyVXMB39gzajhAb

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Phishing page that harvests credentials via JavaScript – avoid and report.

Risk Factors
Credential exfiltration via JavaScript
Password field collected and transmitted to external domain
Unranked domain hosting a phishing login page
Domain age information unavailable

Details

Page Title

空间升级

Scan Type

public

Language

🇨🇳

Chinese

(60% confidence)

Category

healthcare medical

(77%)

Domain Information

Domain 'mi.hengfeng-winery.com' uses the commercial generic top-level domain (.com), featuring subdomain 'mi'. The registrable portion 'hengfeng-winery' spans 15 characters with four vowels and 10 consonants, along with one hyphen. Splitting it apart reveals three words: heng, feng, winery. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mi.hengfeng-winery.com/?token=mEP02BJ5smXqwyVXMB39gzajhAb

Page Load Overview

4.75s
Total Load Time
4
HTTP Requests
1
Domains
N/A
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Language Code:zh
Detection Confidence:60%
Script Type:Han
HTML Lang Attribute:zh-CN
Text Length:253 chars
Detector Agreement:50%

Website Classification

Primary Category

healthcare medical77% confidence
Type: webapp
Method: ml+structural

All Detected Categories

healthcare medical
77%
documentation technical
75%
technology software
54%
download file sharing
51%
real estate property
50%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2188.114.96.3United States
AS13335Cloudflare, Inc.
2188.114.97.3United States
AS13335Cloudflare, Inc.
42--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16E42449A59B314A57D13E4FD57E7474632A48003C40EC9543FAC678C4FCEDC6AA22B9E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:IvvV0/LTGZiku30qeMbyJwCzlxxalJT7eomQREZm:I1Xih0m

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:13075:UAaJRApZJogCAUWDEgCGVBSw4wYYFBAwLZEaC6ETjY4QKINhAGA1hIAORCRRRUDmUAIBKAIEG6AYAgEUsgwRASaKQiUABKkY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c3cffffffff
Perceptual Hash:9616646db94a4e9b
Difference Hash:86ec61791a661f06
Wavelet Hash:00003c2ccff3c7ff
Color Hash:#d2532d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data