Security Scan Report: cl2603031c5.top

Redirected to:
http://www.b7334e2fa4acac.top/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 1 country across 5 domains to perform 58 HTTP transactions. The main domain is cl2603031c5.top and was registered 7 months ago.

Submitted URL: https://cl2603031c5.top/

Effective URL:
http://www.b7334e2fa4acac.top/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Adult-content site running a fast domain-rotation/block-evasion scheme on a 15-day-old unranked .top domain; no forms, no malware and no brand impersonation, but evasive mirror/email-for-new-domain tactics warrant caution.

Risk Factors (5)
Extremely new domain (15 days) on a high-abuse .top TLD
Actively rotating domains and soliciting email contact to re-supply new addresses — a block-evasion pattern
Cross-domain redirect to a second unrelated registrable domain
Unranked third-party script host (cidxig.cl2603023bd.top) loaded by the page
Generic .top-domain IDS alerts (weak, reputation-only)
Safety Factors (5)
No forms at all — 0 password, 0 disguised-password, 0 payment fields; no credential harvesting possible
No threat-intelligence matches against the page or its loaded resources
No JavaScript malware / hunting-rule hits and no known malicious kit in roster
No credential exfiltration detected; the only cross-origin JS target is region1.google-analytics.com (top-ranked legitimate analytics)
No brand impersonation — the site presents its own adult-forum branding, not another entity's
Domain age information unavailable

Details

Page Title

欢迎您

Scan Type

public

Domain Name Analysis

You're looking at domain 'cl2603031c5.top' on the .top top-level domain while skipping any subdomain. Its registrable label 'cl2603031c5' stretches across 11 characters containing zero vowels alongside 3 consonants, notching 8 digits. Splitting it apart reveals four words: cl, 2603031, c, 5. Average segment length settles at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Sigil Re aa Strawberry is the trend © She is Bae 84H RAP © HS kale DERMAENS Wes, HA RBERMBMGZ : caoliu9S0@gmail.com AUS ERTL, AA PRIEKA IAAI! MRADATATAAI, BER ( ) BBA, Bae ARAR, B+ / WARNING

Page Load Overview

3.47s
Total Load Time
2.7 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:851 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media50% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
50%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.14.97Google · CDNUnited States
AS15169Google LLC
5188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
565.8.131.82Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
5216.239.34.36Google · CDNUnited States
AS15169Google LLC
5104.21.48.236Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
565.8.131.71Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
565.8.131.55Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
565.8.131.124Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
5216.239.32.36Google · CDNUnited States
AS15169Google LLC
5810--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13E43C527C3090F11F4A9314CD8AB9AC6CA12618C699DA5A447B6FC41DFDEC5EDC63CB8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:YOTjxhAC7CI8ACl+qlcqlHelngmAX++y2kWlJhxZY74XnTa0iCW7GvduHn1VJ3Ms:PMSY/6VokL55S3xs1EVMph

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:55746:QhG0FgSYShclUAokqIIBwACHIgHABKjsKRIMJPZIIAVCUACQRwnAAhwEJihiTBD7AwGNBwhyEY6m4jUIMKUuAiBESJEAUsAJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9d91f1f5f981f3ff
Perceptual Hash:ec5a993d93962692
Difference Hash:3933272b2b272632
Wavelet Hash:9d919191e181e3fb
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data