Security Scan Report: mall2026.vip

Redirected to:
https://mall2026.vip/m/index
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 4 domains to perform 193 HTTP transactions. The main domain is mall2026.vip and was registered 2 months ago.

Submitted URL: https://mall2026.vip/

Effective URL:
https://mall2026.vip/m/index
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Fake 'Aliexpress' commission-earnings dashboard on a 60-day-old unrelated domain, with a €3,500 minimum balance and withdrawal/login prompts; impersonation plus a phishing threat-intel hit — avoid.

Risk Factors (4)
AliExpress brand impersonation on an unrelated, newly registered domain
Fabricated commission/earning figures and a €3,500 minimum balance prompting deposit and withdrawal actions
Phishing threat-intel match on a third-party domain loaded by the page (single-source, unverified)
Unranked domain with no reputation on a page claiming to be a major brand
Domain age information unavailable

Details

Page Title

Aliexpress

Scan Type

public

Domain Name Analysis

Within the .vip top-level domain, 'mall2026.vip' is registered and has no subdomain. The core label 'mall2026' covers 8 characters holding 1 vowel versus three consonants, along with four digits. It segments into 2 words: mall, 2026. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mall2026.vip/

Page Load Overview

18.16s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:9,198 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as tr

Website Classification

Primary Category

e-commerce shopping78% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

e-commerce shopping
78%
finance banking
73%
healthcare medical
56%
technology software
43%
news media journalism
36%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
49148.66.18.243Hong Kong
AS45753Netsec Limited
48104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
48192.178.183.95Google · CDNUnited States
AS15169Google LLC
48104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1934--

Detected Technologies8

JQueryv1.11.2
100%
Nginxv1.22.1
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T114E3D975B20C11AA01A7A8C4E830FE9971C6DB8EC31AC511376DA7449FF3DE169978EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:NemIKzk3V4J6ia3NmTO5ixmnvA4KdBI7F:N9IKzk3qJ6ia3wTO5ixKvA4KdBIR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:149509:FsUnCRRLBzuJwFICgGyIZBSQcJhBIai2x6QqDZJiNwggRaBAQAMSOCCgpYQApLUCJiLEzBcQoAgODRIoyg+2EomhBBCRAkkB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000ffffff3f3f
Perceptual Hash:a7701fc88c9fe00f
Difference Hash:8c0d8d84ec8c6969
Wavelet Hash:0000007777ffbf3d
Color Hash:#e0a06c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data