Security Scan Report: qq.ip138.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 4 countries across 9 domains to perform 31 HTTP transactions. The main domain is ip138.com and was registered 22 years ago.

Submitted URL: https://qq.ip138.com/hl.asp

The Cisco Umbrella rank of the primary domain is #161,908 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Established 22-year-old Chinese query site (iP138) offering a USD/CNY currency converter. Self-branded, no credential or payment forms, no threat-intel, hunting rule or IDS findings. No risk factors identified.

Safety Factors (4)
Well-established 22-year-old domain
Ranks in Cisco Umbrella top ~162K with consistent query traffic
No credential or payment collection; only a currency conversion utility form
No threat-intelligence, hunting rule, or IDS findings
Domain age information unavailable

Details

Page Title

美元兑人民币汇率_美元对人民币汇率换算查询_USD/CNY汇率 - iP138查询网

Scan Type

public

Domain Name Analysis

Domain 'qq.ip138.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'qq'. The second-level label 'ip138' is 5 characters long containing 1 vowel alongside 1 consonant; it also includes three digits. Splitting it apart reveals 2 words: ip, 138. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://qq.ip138.com/hl.asp

Page Load Overview

75.08s
Total Load Time
669 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:3,602 chars
Detector Agreement:67%

Website Classification

Primary Category

finance banking76% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
76%
adult content
57%
government public service
52%
gambling betting
43%
blog personal website
41%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14138.113.20.52Meteverse · CDNCity of London, England, United Kingdom
AS54994Meteverse Limited.
1163.171.130.131Meteverse · CDNCity of London, England, United Kingdom
AS54994Meteverse Limited.
1120.237.226.200China
AS9808China Mobile Communications Group Co., Ltd.
1118.212.232.38China
AS4837CHINA UNICOM China169 Backbone
1111.45.3.198China
AS9808China Mobile Communications Group Co., Ltd.
1138.113.149.152Meteverse · CDNCanada
AS54994Meteverse Limited.
1138.113.20.41Meteverse · CDNCity of London, England, United Kingdom
AS54994Meteverse Limited.
114.215.183.79China
AS4134Chinanet
1103.235.46.94Hong Kong
AS55967Beijing Baidu Netcom Science and Technology Co., Ltd.
1182.61.200.11China
AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.
3118--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B9B23C44BC85CE1610CB89C891B6823550FA4329E1119ADCF89ACFFA476BDADC63B5CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:uN1IIhS9sYm5LLMVcRsYm5LLtVcQtjs5pvzNp+G:eIIhS9sYm5kVcRsYm51VcQJs5pvzNkG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24511:IIS4DAJs5BQQFFAQC+ULvqgSBiDSJcMIAJAxQDKNCJIgI04VAQiqBGSFJQCSJCuEAYAGcAOqJE2ocY0A+UgBogiAMBbDBX9B

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7ff7e3437ff7f3ff
Perceptual Hash:e5669a983161739e
Difference Hash:dae4c6c6c4c6c6cc
Wavelet Hash:3e76624062667377
Color Hash:#bf4f40

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data