Security Scan Report: ku.nxtlgy.com

Site favicon
Submitted: Sep 24, 2026, 11:57:12 AMCompleted: Sep 24, 2026, 11:57:55 AMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 65%

3
Risk Score

Seven-year-old Chinese crypto news blog with no credential/payment forms, no brand impersonation, and no threat-intel, YARA, or IDS hits. Only concern is spam comment links to Telegram download domains; site itself is low risk.

Risk Factors (3)
Comment/guestbook section is riddled with spam backlinks to unofficial Telegram download domains, indicating poor moderation or comment injection
Domain is unranked in Cisco Umbrella top 1M despite being 7 years old, suggesting low trust/neglect
Unedited default CMS template placeholders indicate an unattended or hastily configured site
Safety Factors (5)
Domain age over 7 years — well past any new-registration phishing window
No credential-harvesting or payment forms present (password fields = 0, payment fields = 0)
No brand impersonation: page displays its own generic branding, not another entity's brand
Zero Indicators of Compromise, zero YARA JavaScript malware matches, zero IDS alerts
Content is ordinary crypto news aggregation, not a scam funnel
Domain age information unavailable

Details

Page Title

网站标题 - 网站副标题(后台修改)

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'ku.nxtlgy.com' is registered, featuring subdomain 'ku'. The registrable portion 'nxtlgy' spans 6 characters containing 0 vowels alongside six consonants. Breaking it apart gives 3 words: nxt, l, gy. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ku.nxtlgy.com

Page Load Overview

4.84s
Total Load Time
766 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-Hans
Text Length:3,756 chars
Detector Agreement:67%

Website Classification

Primary Category

cryptocurrency blockchain82% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
82%
finance banking
76%
technology software
53%
corporate business
51%
adult content
49%

Detected Features

Search
Articles
Comments
OG: index

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
218.134.131.166Guangzhou, Guangdong, China
AS37963Hangzhou Alibaba Advertising Co.,Ltd.
2143.154.254.144Singapore
AS132203Tencent Building, Kejizhongyi Avenue
422--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19E5344B646DD3DFB0E2266D601602B5C7083853FCA93CED3B2F665822F46E76D90605B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:ROII5tv/4OxBAgCUYbgDD5LSDjvODDYlD2RlDAYrCUdDrNgvC7lsKoynK:RcFb8O86lCUd3NkKXnK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:63525:MVwqogsjggDIJUDAstwnyJACJpkgYxWCABAgFo5ogAGBCFBQDkhBgsIUCi8BIGMkwQoHJWAkLWM5VEQHRgQJkFKCgGGta5Ch

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fdffff9999f3b39f
Perceptual Hash:aed193641fe0e09b
Difference Hash:696acc336be46478
Wavelet Hash:3cb8de9898b2321e
Color Hash:#78763a

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data