Security Scan Report: blog.xlab.qianxin.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 6 domains to perform 36 HTTP transactions. The main domain is qianxin.com and was registered 14 years ago.

Submitted URL: https://blog.xlab.qianxin.com

The Cisco Umbrella rank of the primary domain is #189,468 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 55%

7
Risk Score

QiAnXin X Lab's own security research blog: no forms, no impersonation, no malware/JS findings. A multi-source threat-intel 'malicious host' tag on the primary domain is the sole adverse signal and may reflect its malware-analysis content.

Risk Factors (1)
Primary domain reported as a malicious host by two independent threat-intel feeds (misp.scanmalware.com, threatfox.abuse.ch) — note the site's subject matter is malware research, which can itself trigger such feeds
Domain age information unavailable

Details

Page Title

奇安信 X 实验室

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'blog.xlab.qianxin.com' is registered; it also runs on subdomain 'blog.xlab'. Count 7 characters in 'qianxin' holding three vowels versus 4 consonants. Tokenizing the label suggests three words: qian, x, in. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://blog.xlab.qianxin.com

Page Load Overview

27.51s
Total Load Time
3.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:74%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:23,798 chars
Detector Agreement:100%
Language mismatch: Declared as zh-CN but detected as en

Website Classification

Primary Category

cryptocurrency blockchain73% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
73%
technology software
68%
documentation technical
59%
government public service
37%
corporate
35%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4121.32.243.81Guangzhou, Guangdong, China
AS4134Chinanet
4104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4192.178.183.97Google · CDNUnited States
AS15169Google LLC
4151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
4216.239.32.36Google · CDNUnited States
AS15169Google LLC
4151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
4104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4216.239.34.36Google · CDNUnited States
AS15169Google LLC
369--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11C4395705EE0D9FA911361C36A98AF45EEA4E24BC2254598B2FD87E50FC7FB7640390C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:V1uXJH8vyh49l4uu/3V26tlJUnnCufVB+K8B5Yo/IOFe:bNCYB8BWo/IV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:59341:gcIOSsXQADMJKplLIQA0i3sHgQI2gEbCyWB0DBCJhNSIEhQQ0ZJJlhBH4BABiDiCBSSxfC1ggAqNHZCCIRWmEpQ6l1oIapJ1

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000000ffffffff
Perceptual Hash:be038d924d1bbe89
Difference Hash:f10511010d283827
Wavelet Hash:00000000ffffffff
Color Hash:#2dd29e

Other Hashes

Crop Resistant:f10511010d283827

Scan History

Scan history not available

Unable to load historical scan data