ScanMalware.com

Security Scan Report: spellbee.org

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/51899c95-3003-4e65-bd32-061199527921Domain and IP registration (RDAP)/api/v1/rdap/51899c95-3003-4e65-bd32-061199527921How often this domain was scanned/api/v1/domain/stats/spellbee.orgScan history for this domain/api/v1/domain/history/spellbee.org?limit=15
This website contacted 329 IPs in 13 countries across 245 domains to perform 1300 HTTP transactions. The main domain is spellbee.org and was registered 6 years ago.

Submitted URL: https://spellbee.org/

The Cisco Umbrella rank of the primary domain is #564,496 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Established, self-branded free word-game site with no forms, no credential or payment collection and no threat-intel or malware hits. Only real concerns are an extensive ad-tech redirect chain and a broad consent banner.

Risk Factors (3)
Long ad-tech redirect chain (71 hops, 48 cross-domain) typical of programmatic ad monetization — an annoyance/privacy concern, not evidence of fraud
One HIGH IDS alert 'ET DNS Query for .cc TLD' and one INFO hex-content heuristic; both are generic browsing-pattern signatures, not content-malware evidence
Aggressive consent/data-sharing banner listing over a thousand ad partners
Safety Factors (5)
Well-established domain (over 6 years old)
No forms of any kind, therefore no credential harvesting or payment capture
No brand impersonation — the site presents its own brand, not another company's; 'Spelling Bee' here is a generic game format, no claim to be an official NYT product
No Indicators of Compromise, no malware hunting-rule hits, no phishing kit signatures
Third-party scripts are all mainstream, top-1M-ranked ad, consent and analytics providers
Domain age information unavailable

Details

Page Title

Spelling Bee Game - 100% Free

Scan Type

public

Domain Name Analysis

The domain name 'spellbee.org' uses the non-profit oriented generic top-level domain (.org) and has no subdomain. The registrable portion 'spellbee' spans 8 characters containing 3 vowels alongside five consonants. It segments into two words: spell, bee. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Privacy & Transparency spellbee.org and our partners ask for your consent to use your personal data, and to store and/or access information on your device. This includes using your personal data for...

Page Load Overview

2.72s
Total Load Time
12.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,127 chars
Detector Agreement:80%

Website Classification

Primary Category

education learning47% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
47%
adult content
40%
corporate
35%
documentation technical
32%
entertainment media
31%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
316176.123.1.123Chisinau, Chișinău Municipality, Moldova
AS200019Alexhost S.r.l.
3104.21.42.32Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.21.63.106Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.127.156Google · CDNUnited States
AS15169Google LLC
3142.251.14.97Google · CDNUnited States
AS15169Google LLC
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
352.57.221.121Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
3188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
3216.239.34.36Google · CDNUnited States
AS15169Google LLC
1300329--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14FA4496572B2A1F3057FB4E1602A77E62567934BF24097F070AC8BD82FA5D97082367C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:YJ6BN84ybmodcwLhYChH1qfBVPMYTb1YeRoIeQEGZDfPmVDMYTb1YeRo2JkGFfwd:FBC6CzqfcIb1YrIeQEGRIb1YrDGuUBY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:458135:NHsjSEyAAUAAkIEAdRsFDSaBimBMJURhw8aaFQAXDAIICRAgqaA1GBABYJQABx2DAKEhEAaQIGj2QgAYAANAEUJ7geI+ChpI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e77e7e7e766666c7
Perceptual Hash:90cdbb6638671966
Difference Hash:1d808c88a48ccc1f
Wavelet Hash:007e6e66766666c3
Color Hash:06600018000

Other Hashes

Crop Resistant:1d808c88a48ccc1f,f3f1f1f0a4f8d8d6,f3f1e1e0acf8d8d4,a1b1f0f0f0f0f0b1

Scan History

Scan history not available

Unable to load historical scan data