lx-sagittarius-star-mail.qiye.163.com is a subdomain of NetEase's enterprise email platform, but the page itself is a bare Spring Boot login screen – likely a developer's leftover test project. The biggest red flag is the invalid SSL certificate: the site can't establish a secure connection, so any login credentials you type would be sent in plain text. No privacy policy, terms of service, or contact information exists, which is unusual for any page asking for a password. While it's not flagged on any blacklists, the technical setup screams 'unmaintained staging environment.' If you stumbled here via a link, don't log in. There's no evidence this is a phishing site, but it's not functional enough to be trusted. For now, it's a safety risk you can avoid.
No — lx-sagittarius-star-mail.qiye.163.com doesn't look safe
In plain English
This site looks like a forgotten test page, not a real service. The invalid SSL certificate means any data you enter (including a login) could be intercepted. It's unsafe to use for anything, and there's no way to contact who set it up. Skip it.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The SSL certificate is invalid, making the site unreachable over a secure connection. This is a serious flaw for any page that presents a login form, as it exposes all data in transit.
The domain is a subdomain of qiye.163.com, which belongs to a reputable Chinese email provider. But there's no specific ownership or team information for this project, which is common for internal or staging sites.
No blacklist flags or Google warnings were found, and the domain resolves cleanly. The lack of web archive history is typical for a recently created or low-traffic subdomain.
The site provides no contact details, about page, or social media presence. For a publicly accessible page with a login prompt, this is a significant gap; a legitimate service would at least show who runs it.
No privacy policy or terms of service are present. While this might be acceptable for a personal test project, the login form suggests data collection, which legally requires disclosure in many regions.
The site loads fast and is hosted on Alibaba's network, but the broken SSL certificate undermines the entire setup. No email handling or DNSSEC is configured, which is fine for a simple test page.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.