Security Scan Report: blu1.store

Site favicon
Submitted: Oct 1, 2026, 1:36:20 PMCompleted: Oct 1, 2026, 1:37:22 PMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

New (14-day-old) self-branded Arabic accessories store on the legitimate Salla platform, with no forms, no IoC and no malware. Risk comes from likely counterfeit luxury-brand goods, not phishing; treat purchases with caution.

Risk Factors (3)
Very new domain (14 days) with no established reputation
Apparent sale of counterfeit luxury-brand merchandise (Louis Vuitton, Dior, Cartier, Van Cleef named products) on an unofficial store
One unranked third-party script host (emadbakry.github.io)
Safety Factors (4)
No credential fields, password fields, or payment fields present in the page DOM
Runs on the legitimate Salla e-commerce platform (api.salla.dev, cdn.salla.network)
No Indicators of Compromise, no YARA malware, no network IDS alerts
Self-branding consistent with the domain; no impersonation of another entity's identity
Domain age information unavailable

Details

Page Title

سلاسل | بلو

Scan Type

public

Domain Name Analysis

Domain 'blu1.store' uses the .store top-level domain and has no subdomain. The registrable portion 'blu1' spans 4 characters split between one vowel and two consonants, plus one digit. Breaking it apart gives two words: blu, 1. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://blu1.store/%D8%B3%D9%84%D8%A7%D8%B3%D9%84/c1063248418

Page Load Overview

1.43s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇸🇦Arabic
Code: ar
Confidence:80%
Script:Arabic
Direction:rtl

Detection Details

HTML Lang Attribute:ar
Text Length:1,510 chars
Detector Agreement:75%

Website Classification

Primary Category

adult content82% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
82%
blog personal website
81%
documentation technical
62%
technology software
52%
social media network
48%

Detected Features

Search
Products
OG: store
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11162.159.143.27Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.66.3.23Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7185.199.110.153Fastly · CDNUnited States
AS54113Fastly, Inc.
7142.250.154.97Google · CDNUnited States
AS15169Google LLC
734.96.67.224Google · CDNKansas City, Missouri, United States
AS396982Google LLC
7142.251.157.119Google · CDNUnited States
AS15169Google LLC
7142.251.110.148Google · CDNUnited States
AS15169Google LLC
10214--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T122A46D697396712247DB80E950EA1102F33DAA38940844ACF7DDD4DA7EE4E4851FBF3A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:heoAV5dY/0I3xamhFE+q29VGDWoWi1779mF4zH0URN6OX/ps:Qc/0UF3q29sDWoWi177sSUURkOO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:481788:wDgMMgCBvUCKQGCQyKiAnKBESQIDQETgcEXEgOxYQyFxsiAhRkGBAKKQCBGtFSwcMFr1cARGCYBBGiQCBGvAFIHIKBlRATkA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffe7e7e7e7ffff
Perceptual Hash:a22689998d6633fb
Difference Hash:80080c0c18080800
Wavelet Hash:00000000e7e7ffff
Color Hash:#1f931f

Other Hashes

Crop Resistant:80080c0c18080800

Scan History

Scan history not available

Unable to load historical scan data