Security Scan Report: dule-vip.top

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 10 HTTP transactions. The main domain is dule-vip.top and was registered 1 month ago.

Submitted URL: https://dule-vip.top/login/index

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Analyst-vetted critical crypto-clipboard-hijacker kit detected in this young 'VIP' login site's own scripts; do not use, and never copy/paste wallet addresses here.

Risk Factors (5)
Critical malware hunting-rule match: in-page crypto clipper that swaps copied TRON/ETH/BTC wallet addresses in the clipboard
Known malicious kit identified by analyst-vetted roster (web-crypto-clipper-rca-2026-11)
Login/credential collection page on a 52-day-old unranked domain
HIGH IDS alerts: DNS query and HTTP requests to a *.top domain flagged as likely hostile
'VIP' naming pattern consistent with fraudulent task/investment site family
Domain age information unavailable

Details

Page Title

Dule

Scan Type

public

Domain Name Analysis

The domain name 'dule-vip.top' uses the .top top-level domain. Count 8 characters in 'dule-vip' split between three vowels and 4 consonants; bonus characters include one hyphen. Splitting it apart reveals two words: dule, vip. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dule-vip.top/login/index

Page Load Overview

2.09s
Total Load Time
460 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:63%
Script:Latin
Direction:ltr

Detection Details

Text Length:72 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network66% confidence
Type: static
Method: ml+structural

All Detected Categories

social media network
66%
finance banking
55%
adult content
47%
government public service
39%
healthcare medical
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10163.181.214.2United States
AS24429Zhejiang Taobao Network Co.,Ltd
101--

Detected Technologies3

JQueryv1.11.3
100%
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T158C29994B45C52782C27A7049FCDA72C9025F8539E138826B21E049AFFD3FF535E2B96

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:R0rGh4xksc64Jysq7v7itqva1YOl67wbHY1YOl6ye6k:Rebx/c64Jysq7v2tz1YOl64HY1YOl6yG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26114:SIEMGIKWcFIMGYBAghLXkCEEGWAAQD4CKKEYQbQAa5IACU3EaBYAGMSEBcBK1UNExcEQdcMKiYACGHAkxcGkODIIAQAlhiFB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7ffe7ffffff
Perceptual Hash:e6663333938ccc66
Difference Hash:4d4d4d164d161616
Wavelet Hash:c3c3c3c3c3c3c3c3
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data