Security Scan: 欢迎您

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ea6c0b26-9772-4906-b231-6bd9516601a2 Domain and IP registration (RDAP)/api/v1/rdap/ea6c0b26-9772-4906-b231-6bd9516601a2How often this domain was scanned/api/v1/domain/stats/cl26jul02a1e.top Scan history for this domain/api/v1/domain/history/cl26jul02a1e.top?limit=15

This website contacted 11 IPs in 1 country across 5 domains to perform 71 HTTP transactions. The main domain is cl26jul02a1e.top and was registered 4 months ago.

Submitted URL: https://cl26jul02a1e.top/

Effective URL:

https://a0c6e1541f0603.top/

Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

Risk Score

Adult-content mirror gateway on a fresh randomized .top host that rotates domains and pushes an email fallback to dodge blocking. No forms, no credential theft, no malware, no Indicators of Compromise — evasive but not phishing.

Risk Factors (6)

Deliberate domain-rotation evasion scheme with rotating randomized .top hostnames and an email fallback for new domains

Entry domain registered ~15 days ago; the .top TLD and rapid domain churn are consistent with ban-evasion infrastructure

Encourages circumvention of blocking ('海外永久网址（翻墙）') and claims the site is frequently blocked

IDS flagged the .top domain as potentially hostile traffic

Adult content published from anonymous rotating hosts with no operator identity or contact beyond a free Gmail address

Clipboard auto-write on page load

Safety Factors (5)

No forms at all: 0 password fields, 0 disguised password fields, 0 payment fields, 0 email/username fields (verified from DOM)

No Indicators of Compromise against the page or its loaded resources

No hunting rule JavaScript malware patterns and no high-precision native-hunting-rule hits

No known phishing kit in the kit roster; no credential exfiltration and no cross-origin form submission

No impersonation of another organisation's brand — the page presents its own adult-content mirror branding

Domain age information unavailable

Details

Page Title

欢迎您

Scan Type

public

Favicon Hash

MMH3: -1157278861

MD5: cd33e5637e34a8ec0f0395df8268c6cc

Domain Name Analysis

Within the .top top-level domain, 'cl26jul02a1e.top' is registered and has no subdomain. The second-level label 'cl26jul02a1e' is 12 characters long split between 3 vowels and 4 consonants, plus five digits. Segmentation suggests 7 words: cl, 26, jul, 02, a, 1, e. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Sigil Re aa Strawberry is the trend © She is Bae 84H RAP © HS kale DERMAENS Wes, HA RBERMBMGZ : caoliu9S0@gmail.com AUS ERTL, AA PRIEKA IAAI! MRADATATAAI, BER ( ) BBA, Bae ARAR, B+ / WARNING

Page Load Overview

3.17s

Total Load Time

5.0 MB

Total Size

Language Analysis

Primary Language

🇨🇳Chinese

Code: zh

Confidence:60%

Script:Han

Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN

Text Length:851 chars

Detector Agreement:100%

Website Classification

Primary Category

entertainment media50% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

entertainment media

50%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.14.97Google · CDN	United States	AS15169Google LLC
6	65.8.131.55Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	216.239.32.36Google · CDN	United States	AS15169Google LLC
6	142.251.110.97Google · CDN	United States	AS15169Google LLC
6	65.8.131.71Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	65.8.131.82Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	65.8.131.124Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	172.67.213.212Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
71	11	-	-