ScanMalware.com

Security Scan Report: blubank.com

Redirected to:
https://blubank.sb24.ir/
Site favicon
Submitted: Aug 9, 2026, 12:47:53 PMCompleted: Aug 9, 2026, 12:49:50 PMpubliccompleted

Summary

This website contacted 2 IPs in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is blubank.sb24.ir.

Submitted URL: https://blubank.com

Effective URL: https://blubank.sb24.ir/Redirected

The Cisco Umbrella rank of the primary domain is #798,396 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 78%

3
Risk Score

The site impersonates a bank without collecting credentials, showing moderate risk due to brand mismatch and low domain reputation.

Risk Factors
Brand impersonation on a low‑rank domain
Circular redirect pattern
Absence of legitimate banking licensing information
Safety Factors
Domain age is well established (over 11 years)
No malicious JavaScript or network alerts detected
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

بلو | بانک ولی دوست‌داشتنی

Scan Type

public

Language

🇮🇷

FA

(80% confidence)

Category

finance banking

(97%)

Domain Information

Within the commercial generic top-level domain (.com), 'blubank.com' is registered without a subdomain. Its registrable label 'blubank' stretches across 7 characters with two vowels and 5 consonants. Segmentation suggests two words: blu, bank. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://blubank.com

Page Load Overview

2.22s
Total Load Time
127
HTTP Requests
12
Domains
9.1 MB
Total Size

Language Analysis

Primary Language

🇮🇷Persian
Code: fa
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

Language Code:fa
Detection Confidence:80%
Script Type:Unknown
HTML Lang Attribute:fa
Text Length:54,513 chars
Detector Agreement:80%

Website Classification

Primary Category

finance banking97% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
97%
e-commerce shopping
87%
download file sharing
84%
technology software
84%
cryptocurrency blockchain
80%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
64185.143.234.238Arvancloud · CDNIran
AS205585Noyan Abr Arvan Co. ( Private Joint Stock)
63185.143.233.238Arvancloud · CDNIran
AS205585Noyan Abr Arvan Co. ( Private Joint Stock)
1272--

Page Statistics

127
Requests
12
Unique Domains
4.6 MB
Total Size

Detected Technologies3

HSTS
40%
ArvanCloud
40%
Google Tag Manager
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14994C6A4155C22722152DB9293227A3CE0B79DB3D64DB54CF0AF0BB52FE4C2B8D4DA74

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:utW2M2wgsygyI0c4GZlnZ6ADLVLiKD7VaSB34JEJuLEsm:utW2M2wgFi0c4GPZ6O1q234JEJuL4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:427341:GgRoiINgNMLEQeBMwksNEkQsELQQyAMgQDVBIRDr0AlFKAAoEyUaBBgDGEOFEhGXBcOVNBQmZTRJlAAHgCmAiwLAkZSWC2CI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:81f1f1f1f1f1fffb
Perceptual Hash:ec6c19386d3a6d38
Difference Hash:3307072727270002
Wavelet Hash:80c0c1e1f1a1fff3
Color Hash:#acbf40

Other Hashes

Crop Resistant:3307072727270002,f0f0f0f0f0f0f0f0

Scan History

Scan history not available

Unable to load historical scan data