Security Scan Report: ftw.alibaba99.com

Redirected to:
https://ftw.alibaba99.com/login?lang=en&darkMode=false
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 15 HTTP transactions. The main domain is alibaba99.com and was registered 1 year 8 months ago.

Submitted URL: https://ftw.alibaba99.com

Effective URL:
https://ftw.alibaba99.com/login?lang=en&darkMode=false
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Google Safe Browsing flags social engineering on this FTW 'Backoffice' login page, which collects username/password on an unranked domain mimicking the Alibaba brand — a credential-phishing profile.

Risk Factors (5)
Google Safe Browsing social engineering/phishing detection
Unauthenticated 'backoffice' credential login on a brand-mimicking hostname (alibaba99.com)
Cross-origin WebSocket to an unranked third-party host (backend.iboss2u.com)
Domain name mimics the Alibaba brand while the page claims a different entity (FTW)
No legitimate business indicators (legitimacy score 15/100, unranked)
Domain age information unavailable

Details

Page Title

FTW Backoffice

Scan Type

public

Domain Name Analysis

You're looking at domain 'ftw.alibaba99.com' on the commercial generic top-level domain (.com) with subdomain 'ftw'. Count 9 characters in 'alibaba99' containing four vowels alongside 3 consonants, plus two digits. Tokenizing the label suggests three words: ali, baba, 99. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ftw.alibaba99.com

Page Load Overview

12.14s
Total Load Time
5.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:122 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software54% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
54%
documentation technical
37%
adult content
32%
finance banking
27%
news media journalism
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
347.129.107.34Aws · CLOUDSingapore, Singapore
AS16509Amazon.com, Inc.
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
3142.251.20.94Google · CDNUnited States
AS15169Google LLC
3142.251.13.95Google · CDNUnited States
AS15169Google LLC
3192.178.183.94Google · CDNUnited States
AS15169Google LLC
155--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18471F8E78D56120E3022A1354CE0684D9A7C400BDBA77A95787B709D8FC77F70937AEA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:Td9k1tqwJCpahDn2gbX4C8vr72RvIFRo7B:fk1YwYpahZEC8PgvcRO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3821:yQDCg4AABAAEAzASKAWAACIAAEJggABJIAwAAAZAAAQSCAJUAFCIQCkEGARAKgIAARRAEAQAEJIBgCUFAQgQCAbiJEACAABE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7efe7e7ffffffff
Perceptual Hash:b33398cc66666699
Difference Hash:08084d4d000c0000
Wavelet Hash:e7e7e7e700000000
Color Hash:#785b3a

Other Hashes

Crop Resistant:08084d4d000c0000

Scan History

Scan history not available

Unable to load historical scan data