Security Scan Report: www.chengbaotai.net

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 1 domain to perform 9 HTTP transactions. The main domain is chengbaotai.net and was registered 1 week ago.

Submitted URL: https://www.chengbaotai.net/

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Analyst-vetted kit roster and a critical YARA rule identify this new site as an 'AI trading platform' lead funnel that harvests sign-ups and phone numbers for SMS-verified call-centre fraud.

Risk Factors (5)
Known malicious phishing kit identified by analyst-vetted roster (AI-trading lead funnel with SMS verification)
Critical-severity YARA match for the same SMS-verify lead-funnel kit
Fabricated 'AI trading platform' with guaranteed passive-income framing and no corporate or licensing disclosure
Domain registered 12 days ago and absent from all reputation rankings
Obfuscated inline JavaScript with encoding/decoding routines and links to unrelated throwaway domains
Domain age information unavailable

Details

Page Title

澄保泰 — AI 驅動的智能市場分析平台

Scan Type

public

Domain Name Analysis

The domain name 'www.chengbaotai.net' uses the network infrastructure generic top-level domain (.net); it also runs on subdomain 'www'. The second-level label 'chengbaotai' is 11 characters long with 5 vowels and six consonants. Tokenizing the label suggests three words: cheng, bao, tai. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.chengbaotai.net/

Page Load Overview

0.80s
Total Load Time
40 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh
Text Length:1,432 chars
Detector Agreement:80%

Website Classification

Primary Category

finance banking89% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
89%
government public service
89%
technology software
86%
corporate business
79%
adult content
47%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.67.170.60Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.148.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.95.87Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
96--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1466339653586001962E3E0E6B3AB770DB91CD2038C45C855B6FE56A1DFDBEEAA17330C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:YsaISTQk0RlTEpnx1QxF7zIMDOnLy1wDSgpVYa23p7rI+iT3uQ/KUrFq9LhN3REC:YsaISTQk0RlEx1cBHa2SDSIed0/K8y7r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:72427:kCmBEFoUIqBAWOhjCNYScqUGEBAAEgySJShAcNIyrYQQYDgPsd5QAIZhQxCKNagkBCzFbjJBAqBTAiHUIExAgZDSx6CsIWVI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00000000ffffff
Perceptual Hash:8803f8f979c9cbc8
Difference Hash:fbffe7dfffff3637
Wavelet Hash:ff00000000ffffff
Color Hash:#afc587

Scan History

Scan history not available

Unable to load historical scan data