Security Scan Report: www.xiatianxue.net

Site favicon
Submitted: Jun 29, 2026, 2:24:49 PMCompleted: Jun 29, 2026, 2:25:56 PMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is xiatianxue.net and was registered NaN years ago.

Submitted URL: https://www.xiatianxue.net/?token=tLzT92yUigzULwyT9gzajhAa

AI Security Verdict

Low Risk

Confidence: 78%

3
Risk Score

High risk page with a credential login form, likely a phishing attempt.

Risk Factors
Credential collection form on an unranked domain
Suspicious account suspension notice used to lure credentials
Safety Factors
Domain age > 2 years (well‑established)
No malicious JavaScript or external form submission detected
No known IoC or malware signatures
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

Account Suspension Notification

Scan Type

public

Language

🇨🇳

Chinese

(60% confidence)

Category

finance banking

(76%)

Domain Information

The domain 'www.xiatianxue.net' uses the network infrastructure generic top-level domain (.net) and includes subdomain 'www'. Its registrable label 'xiatianxue' stretches across 10 characters containing 6 vowels alongside four consonants. Word splitting yields 3 words: xia, tian, xue. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.xiatianxue.net/?token=tLzT92yUigzULwyT9gzajhAa

Page Load Overview

0.65s
Total Load Time
4
HTTP Requests
1
Domains
N/A
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Language Code:zh
Detection Confidence:60%
Script Type:Han
HTML Lang Attribute:cn
Text Length:270 chars
Detector Agreement:50%
Language mismatch: Declared as cn but detected as zh

Website Classification

Primary Category

finance banking76% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking
76%
cryptocurrency blockchain
74%
adult content
69%
documentation technical
64%
healthcare medical
61%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.21.52.11United States
AS13335Cloudflare, Inc.
41--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T169112F46EA44001DB4D64198FE66A2997BA680F0A15A0B2C7CC9D535C39DB28C9FF06C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hR/C0A4UVHrk+G93hI4S0qX46bv4pUjka:TcvN49x19iFwpUt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:867:ACAAAQAAIBhEAAAACAAAAAAAAIAAAAABAAAgAAAAAAAAAAAAAAACAAACAAAAAAAAAAAAAAAEAABAAAAAAEQwCAAAABAAAAEA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7fff7ffffffff
Perceptual Hash:b333332666cecc89
Difference Hash:0c1c100400000000
Wavelet Hash:c4c4fcd4f0f0f0f0
Color Hash:#2d4386

Other Hashes

Crop Resistant:0c1c100400000000

Scan History

Scan history not available

Unable to load historical scan data