Security Scan Report: www.mall666it.vip

Redirected to:
https://www.mall666it.vip/m/index
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 4 domains to perform 194 HTTP transactions. The main domain is mall666it.vip and was registered 2 months ago.

Submitted URL: https://www.mall666it.vip/

Effective URL:
https://www.mall666it.vip/m/index
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Aliexpress-branded page on unrelated 60-day-old domain showing fabricated commission earnings and a €3,500 minimum balance, plus a loaded domain reported as phishing. Brand impersonation/fake earning scam — do not deposit or share data.

Risk Factors (4)
Brand impersonation: page claims to be Aliexpress on mall666it.vip, which is not an AliExpress domain
Fabricated commission/earnings screens with an advertised minimum balance of €3,500 (advance-fee / fake earning bait)
Third-party phishing-flagged domain 2026sp88.vip loaded by the page (single-source, unverified)
New, unranked domain with no relation to the impersonated brand
Domain age information unavailable

Details

Page Title

Aliexpress

Scan Type

public

Domain Name Analysis

The domain name 'www.mall666it.vip' uses the .vip top-level domain and includes subdomain 'www'. Its registrable label 'mall666it' stretches across 9 characters containing two vowels alongside four consonants, along with three digits. Segmentation suggests three words: mall, 666, it. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.mall666it.vip/

Page Load Overview

18.63s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:9,223 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as tr

Website Classification

Primary Category

e-commerce shopping80% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

e-commerce shopping
80%
finance banking
72%
healthcare medical
54%
technology software
48%
cryptocurrency blockchain
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
50148.66.18.243Hong Kong
AS45753Netsec Limited
48104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
48142.251.110.95Google · CDNUnited States
AS15169Google LLC
48104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1944--

Detected Technologies8

JQueryv1.11.2
100%
Nginxv1.22.1
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T175E3D975B20C11AA01A7A8C4E830FE9971C6DB8EC31AC511376DA7449FF3DE169978EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:BEiJZekwzIIK094+VMVbK1WP2CU5sQRabIzPBgZ3VOjVoPhctE7:NemIK094+VMVbK1WP2CUaQRabIzPBgz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:149534:F6Klo5BCggjogJoARTjEpCCgJAhIACiGDTwIDgA8AAxwQIVhQA2S3AcLkSZnoAjRICQA2QtUKsZER0MlxSQQcAExMYgwzElD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000ffffff3f3f
Perceptual Hash:a7701fc8889ff00f
Difference Hash:8c4d0d84ec8c6969
Wavelet Hash:0000007777ffbf3d
Color Hash:#d279c1

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data