Security Scan Report: www.bluehorizons.travel

Submitted: Sep 17, 2026, 1:47:41 AMCompleted: Sep 17, 2026, 1:48:49 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

URL /daemonx on an established travel domain is flagged as a malware download and matches a critical IDS alert for an ELF executable download — a likely compromised site serving malware. Avoid.

Risk Factors
URL reported for hosting a malware download (URLhaus)
Critical network IDS alert for ELF executable download on the same path
Suspicious bare path (/daemonx) with no UI, text, or legitimate page content
Likely compromised legitimate domain being abused to distribute malware
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'www.bluehorizons.travel' uses the .travel top-level domain and includes subdomain 'www'. The core label 'bluehorizons' covers 12 characters with 5 vowels and 7 consonants. Word splitting yields 2 words: blue, horizons. Average segment length settles at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.bluehorizons.travel/daemonx

Page Load Overview

35.25s
Total Load Time
12.5 MB
Total Size

Language Analysis

Primary Language

🇧🇩Bengali
Code: bn
Confidence:100%
Script:Unknown
Direction:ltr

Detection Details

Text Length:497,183 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical79% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
79%
adult content
69%
finance banking
64%
documentation technical
61%
news media journalism
55%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
269.48.190.19Singapore
AS204800WHG Hosting Services Ltd
21--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16407C6F3A61A13CEADDA938F5DB5ACE60743BD102122C08D77A4769171D901E83DFAD2

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

98304:7E+64Cfu6A8hALAWgwfA0b9vlqUJFSb6n1PTVdJUYJPCiT:7E74C9j+x8YxR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17000326:WAWpCZCWWCJYDDrQl5rPBGzF4gmMaAIolcFrCYFBNgk6hCABAKAIcCEMzAZKQMYhzjFI0kAAYKACUhIAvMEEsBkwMDoAHglY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0100007f7f3f7f7f
Perceptual Hash:807f7fc580063f78
Difference Hash:7b0b7ded80e7e3e3
Wavelet Hash:000000377f3f7f7f
Color Hash:#6c9ae0

Other Hashes

Crop Resistant:7b0b7ded80e7e3e3

Scan History

Scan history not available

Unable to load historical scan data