Security Scan Report: leancon.ai

Site favicon
Submitted: Oct 9, 2026, 6:26:32 AMCompleted: Oct 9, 2026, 6:27:07 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

Page reads as a legitimate LeanCon construction-planning SaaS with no forms or impersonation, but its primary domain carries an unverified single-source malware-loader report, which drives an elevated risk rating.

Risk Factors (2)
Primary domain appears in threat intelligence as a malware loader (single-source, unverified community submission)
Domain not present in Cisco Umbrella top 1M (weak prior only)
Domain age information unavailable

Details

Page Title

LeanCon | Construction Planning Delivered in Minutes

Scan Type

public

Domain Name Analysis

You're looking at domain 'leancon.ai' on the Anguillan country-code top-level domain (.ai) while skipping any subdomain. Its registrable label 'leancon' stretches across 7 characters split between 3 vowels and four consonants. It segments into two words: lean, con. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://leancon.ai

Page Load Overview

1.28s
Total Load Time
18.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:6,642 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical60% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
60%
technology software
58%
government public service
52%
corporate business
49%
real estate property
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16104.21.16.221Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16172.67.216.65Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
322--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T119A2A8327170343F856789C9F17323AA61B1E68AFB0D0445A67C427C4BE6C99B93B64E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:aDn1dhwHtSNZFdbWiBMvdX6d/dWdfB49xVv926hq28S3Y15G:aDn18HtSNZFdbWiBM1ilm+9j926hq2Jn

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:22911:AYkQY6C0MxqUXBRnjKQCAiIFgTAhUiCANASSiIsJVQJhEIKL57DRBRURhUC6ZHkA4VjEAUEkmkGcAcRAYGcAKKsoDhBhJRbI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bf0301000503ffff
Perceptual Hash:8d0df93ad2c00fcb
Difference Hash:5b73e2e77d7f9200
Wavelet Hash:bf0301030503ffff
Color Hash:#e09a6c

Other Hashes

Crop Resistant:5b73e2e77d7f9200

Scan History

Scan history not available

Unable to load historical scan data