ScanMalware.com

Security Scan Report: api.db-ip.com

Redirected to:
https://db-ip.com/api/
Site favicon
Submitted: May 4, 2026, 7:01:17 AMCompleted: May 4, 2026, 7:02:44 AMpubliccompleted
Loading additional data...

Summary

This website contacted 11 IPs in 1 country across 13 domains to perform 26 HTTP transactions. The main domain is db-ip.com and was registered NaN years ago.

Submitted URL: https://api.db-ip.com

Effective URL: https://db-ip.com/api/Redirected

The Cisco Umbrella rank of the primary domain is #27,705 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

1
Risk Score

The site appears legitimate with no phishing, malware, or scam indicators.

Safety Factors
Well‑established domain with long registration history
Cisco Umbrella ranking within top 100 K
No external malicious links or IoC matches
No credential exfiltration or suspicious network activity
Only benign external CDNs and analytics domains
Domain age information unavailable

Details

Page Title

Regularly Updated Real-Time IP Geolocation API | DB-IP

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(71%)

Domain Information

The domain 'api.db-ip.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'api'. Count 5 characters in 'db-ip' holding one vowel versus 3 consonants; it also includes one hyphen. Segmentation suggests 2 words: db, ip. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://api.db-ip.com

Page Load Overview

1.04s
Total Load Time
34
HTTP Requests
14
Domains
480 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:3,022 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software71% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
71%
government public service
56%
documentation technical
53%
finance banking
47%
phishing scam
46%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.18.10.207United States
AS13335Cloudflare, Inc.
3192.178.183.95United States
AS15169Google LLC
3142.251.14.95United States
AS15169Google LLC
3104.17.24.14United States
AS13335Cloudflare, Inc.
3172.67.75.166United States
AS13335Cloudflare, Inc.
3104.16.79.73United States
AS13335Cloudflare, Inc.
3142.251.13.97United States
AS15169Google LLC
3104.17.208.5United States
AS13335Cloudflare, Inc.
3142.250.154.97United States
AS15169Google LLC
3142.251.14.94United States
AS15169Google LLC
3411--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F4B2B5A39AFC683700A302C795BC63D578EF593AD0120992B6FFC3A85BC9D857913952

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:/M6tuYIAtf1lZWGvcGWP8+gDEIQ/Ezzsk1JKVZqpI4fGWi03i:/M6tftNJv8cfsk1JKGyWin

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:25265:YE5v+IhZpIZKSUCgAEZI4UiOIAoIgIUAACgGzTCABGDqBACUBREA3sxoQIxUBRQQQYTKFgzIYym81OEVM4gMlZKgAhGsgM6Q

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffff000e0e0e
Perceptual Hash:936d16162d33336e
Difference Hash:fcae085fb8dcdcdc
Wavelet Hash:00ffffef000e0e0e
Color Hash:#2d9ed2

Other Hashes

Crop Resistant:fcae085fb8dcdcdc,ffffefcf4fcfefff

Scan History

Scan history not available

Unable to load historical scan data