Security Scan Report: hlxmgl.com

Site favicon
Submitted: Sep 20, 2026, 8:47:31 AMCompleted: Sep 20, 2026, 8:47:55 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Legitimate-looking Chinese company page, but a CRITICAL EtherHiding malware IDS alert, a blockchain RPC connection, and malware Indicators of Compromise on the domain and a loaded resource indicate a compromised site serving malware.

Risk Factors
Critical network IDS malware alert during page load
Blockchain RPC connection consistent with EtherHiding payload hosting/exfiltration
Malware Indicators of Compromise on the primary domain and on an external resource the page loads
Unranked domain despite 5-year age, consistent with hijacked/repurposed infrastructure
Domain age information unavailable

Details

Page Title

湖北恒磊项目管理有限公司 – Hubei Henglei Project Management Co., Ltd.

Scan Type

public

Domain Name Analysis

The domain 'hlxmgl.com' uses the commercial generic top-level domain (.com). Count 6 characters in 'hlxmgl' holding zero vowels versus 6 consonants. Tokenizing the label suggests 3 words: hl, xm, gl. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hlxmgl.com

Page Load Overview

4.60s
Total Load Time
981 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-Hans
Text Length:1,933 chars
Detector Agreement:50%

Website Classification

Primary Category

real estate property59% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

real estate property
59%
news media journalism
55%
government public service
30%
corporate business
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
547.108.78.147Chengdu, Sichuan, China
AS37963Hangzhou Alibaba Advertising Co.,Ltd.
5104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
153--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T178D3E661037808FA3C6BA3AAD998A3197685ED16DF4651D2E4EBC18431CCDF74DA334B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:siC5O+3OypQxy8Vhn98Qgie35JierZbbwemlUVuXwPmzxIxn4bXc:65OUneIZbbwemlUVugPmN+4bXc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:142831:ERKjjBwFknOAdo6hRABnsEIwAYJIRpAqHCY6UAEhlJAMgGLQBUGgyEVnTWLjAGCNwCwJogAAUiYkQhERCEjDAKkMQImIjmAN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bd9d818181f9ffff
Perceptual Hash:eb1a96c96c944b6a
Difference Hash:6961010713136c23
Wavelet Hash:9d81818081f9ffbb
Color Hash:#9940bf

Other Hashes

Crop Resistant:6961010713136c23

Scan History

Scan history not available

Unable to load historical scan data