ScanMalware.com

Security Scan Report: api.thinkonline.io

Redirected to:
https://api.thinkonline.io/docs/api
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/07b8e471-8dc1-4019-a250-4f8a2616945bDomain and IP registration (RDAP)/api/v1/rdap/07b8e471-8dc1-4019-a250-4f8a2616945bHow often this domain was scanned/api/v1/domain/stats/api.thinkonline.ioScan history for this domain/api/v1/domain/history/api.thinkonline.io?limit=15
This website contacted 3 IPs in 1 country across 2 domains to perform 8 HTTP transactions. The main domain is thinkonline.io and was registered 4 years 1 month ago.

Submitted URL: https://api.thinkonline.io

Effective URL:
https://api.thinkonline.io/docs/api
Redirected

AI Security Verdict

Safe Website

Confidence: 75%

1
Risk Score

An access-restricted API documentation endpoint returning 403 Forbidden. Established 4-year-old domain, no forms, no malware, phishing or threat-intel hits — no risk indicators found.

Safety Factors (4)
Established 4-year-old domain on standard hosting
No credential, payment or contact forms present
No threat-intelligence, YARA or IDS matches on the page or its resources
Only external resource is a well-known Cloudflare analytics script ranked in the top-1M
Domain age information unavailable

Details

Page Title

Forbidden

Scan Type

public

Domain Name Analysis

The domain name 'api.thinkonline.io' uses the British Indian Ocean Territory country-code top-level domain (.io) with subdomain 'api'. The second-level label 'thinkonline' is 11 characters long with 4 vowels and 7 consonants. Splitting it apart reveals 2 words: think, online. Average segment length settles at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://api.thinkonline.io

Page Load Overview

0.43s
Total Load Time
28 KB
Total Size

Language Analysis

Primary Language

🇩🇰Danish
Code: da
Confidence:74%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:23 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as da

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.67.171.156Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.71.198Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
83--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D6F1D82EAA95102DA0D781F7F4E8E74C592696C3DE1387DBB14FB925CF4078B18A361C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:TlJ/SNi/FLQVTLKCGWz5NN5PXy0jRdoSCX4SZTzIn2nx/IGm22W9yECxz:BpV2RKCxnNByTSCX4SZT7nx/9m2jEz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8142:DoqOAYAHe0SgYkNwAjAMAgDHNDiogFQPQZGVJHgSCUDxQkQGBEQI4QZLCCSHLgAAHAlCAsRBSBiWDSEBD/bQQYeEYAzgGCSA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffff
Perceptual Hash:e699992666999966
Difference Hash:0000000808000000
Wavelet Hash:30303c24e0f0f0f0
Color Hash:#539fac

Other Hashes

Crop Resistant:0000000808000000

Scan History

Scan history not available

Unable to load historical scan data