Is lx-sagittarius-star-mail.qiye.163.com safe?
https://lx-sagittarius-star-mail.qiye.163.com/api/j/re
Checked on
How we checked
Coverage: strong · 3 of 4 applicable core capabilities
- Antivirus (61 of 93 engines answered): completed
- Google Safe Browsing: completed
- page reading · not available: did not fully complete
- page capture: completed
- domain records: completed
- web research: completed
Email link-tracking address on NetEase's business mail service, flagged by a few security engines
This address sits on a subdomain of 163.com, a domain registered in 1997, and looks like a link-redirect endpoint from a business email service. Two antivirus engines flagged it as malicious and one as suspicious. A separate security scanner lists the site as a Suspicious Website. The browser threat feed raised no warning. The page itself could not be loaded because its security certificate failed to validate, so we could not check where the link actually leads. The screenshot only showed fragments such as a CAT6A F/FTP cable listing and a Contact us button. With a long-established parent domain but a few current security flags and no reviewable destination, a Moderate Risk score fits.
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 52/100
Moderate Risk covers scores 45–69. 2 findings pulled the score down; 2 pushed it up.
What pulled the score down
- Decisive2 independent antivirus families reported an adverse result.
- ModerateOne public warning on a scam-warning or security site: "Gridinsoft currently classifies this site as Suspicious Website."
What pushed the score up
- SupportsThe parent domain was registered in 1997.
- SupportsThe browser threat feed returned no warning.
No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor). Community reviews never change the Safety Score.
01 · Investigation Brief
Investigation Brief
This address sits on a subdomain of 163.com, a domain registered in 1997, and looks like a link-redirect endpoint from a business email service. Two antivirus engines flagged it as malicious and one as suspicious. A separate security scanner lists the site as a Suspicious Website. The browser threat feed raised no warning. The page itself could not be loaded because its security certificate failed to validate, so we could not check where the link actually leads. The screenshot only showed fragments such as a CAT6A F/FTP cable listing and a Contact us button. With a long-established parent domain but a few current security flags and no reviewable destination, a Moderate Risk score fits.
What the security checks show
Two of 93 engines marked the address as malicious and one as suspicious. Detections came from two independent antivirus families, and Gridinsoft separately classifies the site as a Suspicious Website.
The browser threat feed returned no warning. The registrable domain is more than 29 years old, with a creation date in September 1997.
Established domain, unverified destination
The connection's certificate did not validate, and the page content could not be captured. That means the final destination, along with any contact or policy text, was never reviewed.
The screenshot showed only a cable product reference and a Contact us button. This is not enough to tell who runs the linked content or what it asks of visitors.
Why the score is 52
2 independent antivirus families reported an adverse result. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
3/ 93
detectionsFresh result
3 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 2
- Suspicious
- 1
- Total
- 93
| Engine | Finding |
|---|---|
| BitDefenderMalicious | phishing |
| Chong Lua DaoMalicious | malicious |
| GridinsoftSuspicious | suspicious |
All 93 engine results
- BitDefender - phishing - Malicious
- Chong Lua Dao - Malicious
- Gridinsoft - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- BitDefenderportals
- Forcepoint ThreatSeekersearch engines and portals
- Sophosweb e mail
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
CAT6A F/FTP Contact us
What the captured page showed
2 observations- 01
CAT6A F/FTP
- 02
Contact us
03 · Investigation Story
Investigation story
What the site claims
No page claim could be verified for lx-sagittarius-star-mail.qiye.163.com because no usable page content or saved capture was available.
What we observed
The page itself could not be fully inspected, so the report relies on the other saved checks.
What independent research found
2 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
Web research findings
Independent findings for lx-sagittarius-star-mail.qiye.163.com, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- Gridinsoftopen
"Gridinsoft currently classifies this site as Suspicious Website."
- urlscan.ioopen
"Creation Date: 1997-09-15T04:00:00+0000"
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainlx-sagittarius-star-mail.qiye.163.com
- Redirects tolx-sagittarius-star-mail.qiye.163.com
- Hosted byAlibaba Cloud (Singapore) Private Limited
Domain Timeline
- Sep 15, 1997Domain registered
First appeared in WHOIS records — 29 years old when this review was saved.
- Oct 20, 2026Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.
Domain & Encryption
Certificate issued for *.qiye.163.com.
Server Reputation
05 · Evidence Ledger
Evidence ledger
- Antiviruscomplete
- Browser threat feedcomplete
- Page contentunavailable
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
maliciousMalware, phishing, credential theft and hostile infrastructure.
2 independent antivirus families reported an adverse result.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
One public warning on a scam-warning or security site: "Gridinsoft currently classifies this site as Suspicious Website."
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 3 of 93 engines flagged | Completed | Adverse | fresh · analysed Oct 20, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 20, 2026 |
| Page content | Page content was not available for semantic review | Unavailable | No saved finding | Not available |
| Visual evidence | 2 visible observations saved with the page capture | Completed | No adverse finding | this scan · Oct 20, 2026 |
| Independent research | 2 independent findings were saved | Completed | Adverse | this scan · Oct 20, 2026 |
- Antivirus
- Result3 of 93 engines flagged
- CompletionCompletedFindingAdverse
- Freshnessfresh · analysed Oct 20, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 20, 2026
- Page content
- ResultPage content was not available for semantic review
- CompletionUnavailableFindingNo saved finding
- FreshnessNot available
- Visual evidence
- Result2 visible observations saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 20, 2026
- Independent research
- Result2 independent findings were saved
- CompletionCompletedFindingAdverse
- Freshnessthis scan · Oct 20, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is lx-sagittarius-star-mail.qiye.163.com a scam or is it safe?
Is lx-sagittarius-star-mail.qiye.163.com safe to use?
Has lx-sagittarius-star-mail.qiye.163.com been flagged by antivirus engines?
Is lx-sagittarius-star-mail.qiye.163.com on any phishing or malware blacklists?
How old is the lx-sagittarius-star-mail.qiye.163.com domain?
Does lx-sagittarius-star-mail.qiye.163.com have a valid SSL certificate?
Where is lx-sagittarius-star-mail.qiye.163.com hosted?
How often is the lx-sagittarius-star-mail.qiye.163.com report updated?
08 · Final Verdict
Final verdict
Email link-tracking address on NetEase's business mail service, flagged by a few security engines
This address sits on a subdomain of 163.com, a domain registered in 1997, and looks like a link-redirect endpoint from a business email service. Two antivirus engines flagged it as malicious and one as suspicious. A separate security scanner lists the site as a Suspicious Website. The browser threat feed raised no warning. The page itself could not be loaded because its security certificate failed to validate, so we could not check where the link actually leads. The screenshot only showed fragments such as a CAT6A F/FTP cable listing and a Contact us button. With a long-established parent domain but a few current security flags and no reviewable destination, a Moderate Risk score fits.
09 · Community
Community
Are you the owner of lx-sagittarius-star-mail.qiye.163.com?Verify and reply
