Security Scan Report: guanlansec.com

Redirected to:
https://guanlansec.com/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 71 HTTP transactions. The main domain is guanlansec.com and was registered 3 days ago.

Submitted URL: https://guanlansec.com/

Effective URL:
https://guanlansec.com/login
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

4
Risk Score

Self-branded 观澜SEC pentest platform on a 3-day-old unranked domain with its own same-origin login form. No impersonation, exfiltration, malware or IDS evidence; the lone threat-intel tag is generic abuse reputation (scanning) only.

Risk Factors (3)
Newly registered domain (3 days old) hosting a credential login form
No established reputation: domain absent from Cisco Umbrella top 1M
Weak, unverified single-source community rule match (rule #6, category 'other') in a script
Safety Factors (5)
Self-branding: page title and meta description match the domain name (观澜 / guanlansec)
Login form posts same-origin to guanlansec.com with no external form action
No JavaScript malware patterns, no hunting-rule hits, no IDS alerts, no Safe Browsing findings
No credential exfiltration and no third-party script hosts
No brand impersonation of any other organisation detected
Domain age information unavailable

Details

Page Title

观澜SEC渗透测试平台

Scan Type

public

Domain Name Analysis

The domain 'guanlansec.com' uses the commercial generic top-level domain (.com). Its registrable label 'guanlansec' stretches across 10 characters containing 4 vowels alongside six consonants. Word splitting yields three words: guan, lan, sec. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://guanlansec.com/

Page Load Overview

6.47s
Total Load Time
2.4 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:77 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as zh

Website Classification

Primary Category

technology software74% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
74%
documentation technical
70%
government public service
46%
cryptocurrency blockchain
44%
phishing scam
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
36104.21.30.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
35172.67.173.235Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
712--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17D139505BC08E6606C3BED0D96BD5F39C058F8728A318468F14DC9898BD5BF627E9ED1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:UpamVXmge7NuykcoZh1V5x0rGV4xksc64Jysq7vF7+vx+v+BmAL1sNFyfB2LZFoh:6febx/c64Jysq7vUvIvcmW1KFs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:42868:S+cRMIYTjwEPwMxIYQAaBA6AjCIZEBLmCKhVoAHIkjuC0gBAgIEkAkQUrFOEAALBIICIpOqIC5bkMSAYpx4DHpKJucaAMQg9

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f1f1f1f1f1f1f1f
Perceptual Hash:8c931f6cf0930f96
Difference Hash:747076b6b7777076
Wavelet Hash:1f1f1b1313111f1f
Color Hash:#8479d2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data