Security Report: cn.egihosting.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/285c16ab-9b54-4f52-9429-55c42626314f Domain and IP registration (RDAP)/api/v1/rdap/285c16ab-9b54-4f52-9429-55c42626314f Certificate Transparency/api/v1/ct/cn.egihosting.com How often this domain was scanned/api/v1/domain/stats/cn.egihosting.com Scan history for this domain/api/v1/domain/history/cn.egihosting.com?limit=15

This website contacted 7 IPs in 1 country across 7 domains to perform 55 HTTP transactions. The main domain is cn.egihosting.com and was registered 3 months ago.

Submitted URL: https://cn.egihosting.com/

The Cisco Umbrella rank of the primary domain is #107,204 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate EGI hosting page appears compromised: analyst-vetted DarkSword iOS exploit kit (Coruna wallet stealer) with 3 critical IDS alerts and multiple malware-tagged third-party domains are served alongside normal content.

Risk Factors (4)

Analyst-vetted DarkSword iOS exploit kit (Coruna wallet stealer) identified on the page

Three CRITICAL network IDS exploit-kit alerts (landing page, RCE loader, RCE module)

Six third-party domains reported as apt unc6691-1 malware loaded/contacted by the page

Suspicious .icu domains and IP-check domain contacted from the page

Domain age information unavailable

Details

Page Title

EGIhosting.com – Bare Metal + Cloud + Colocation – DDoS Protection – Santa Clara – Bay Area – 歡迎蒞臨 EGI 機房中文網站

Scan Type

public

Favicon Hash

MMH3: 700231751

MD5: dfbe0512017f418a5650ca4b81a1e242

Domain Name Analysis

The domain name 'cn.egihosting.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'cn'. The core label 'egihosting' covers 10 characters with four vowels and six consonants. Segmentation suggests 3 words: eg, i, hosting. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.30s

Total Load Time

1.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:2,149 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software94% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

94%

entertainment media

84%

news media journalism

83%

corporate business

83%

education learning

80%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	72.13.81.246	Santa Clara, California, United States	AS18779EGIHosting
7	104.18.1.22Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	172.67.187.123Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	104.21.32.211Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	104.16.184.241Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
55	7	-	-