Scan report · about 2 months agoPublic

passport.baidu.com

45.113.194.250AS55967 · HK

Submittedhttps://passport.baidu.com/v2/?login

Verdict

1 of 7 enginesSuspiciousAutomated

Be careful — warning signs found

Automated

It asks you to enter a password. This site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.

What to do

Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.

"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.

Findings

Strongest first

Suspicious fileSuspicious content in the downloaded file

7fe3cb75-1b3a-4495-97dc-bc1fa654e7b8.html

Our Content Inspection engine downloaded the file this URL serves and analyzed it. The payload shows traits commonly seen in malware. Treat it as unsafe until verified.

Success

SHA-256 d0cbc41362ac8e41441d5bb43d6020bcc5733aed3465193ead00142e1c9a017f

InfoCross-domain scripts injected at runtime

2 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP: 45.113.194.250Baidu - Beijing Baidu Netcom Science and Technology Co., Ltd., CN · AS55967HK
TLS: CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE · expires Jan 24, 2027

WHOIS

Registrar: MarkMonitor Information Technology (Shanghai) Co., Ltd.
Created: Oct 11, 1999
Expires: Oct 11, 2028
Nameservers: ns1.baidu.comns2.baidu.comns3.baidu.comns4.baidu.comns7.baidu.com

2 malicious2 suspicious

Hashes & fingerprints

Page Hash83fb0f817da9b1923b65a911dc4cf1f4516e37bc1a49cf766728acaa0cc3f220 DOM Hash057f037bef91d6c5b39c6c568b423cb811c0bb71f77e75c73f60713b0d324118 Screenshot pHasha5448e3bd8ec71cc JARM29d21b00029d29d21c29d21b21b29d46f0ca2446873e81c43869f3dca73bff JA4Xa373a9f83c6b_2bab15409345_4396f85bf9fa Cert ThumbprintA5B6605A62E6B324A3F93AED19EBDC9E595EAFD4 Cert IssuerCN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE

Page capture

Live

Title “登录百度账号”

Visit Site

Engines

7 · time to verdict