Security Scan Report: somethingblue.site

Submitted: Completed: publiccompleted
This website contacted 32 IPs in 3 countries across 20 domains to perform 590 HTTP transactions. The main domain is somethingblue.site and was registered 3 years 9 months ago.

Submitted URL: https://somethingblue.site

AI Security Verdict

High Risk

Confidence: 74%

8
Risk Score

Aged wedding-blog domain appears compromised: it loads a multi-feed-flagged malware domain (gixxipi9823.life), carries its own malware tag, and injects gambling SEO spam. Not a genuine credential phish, but unsafe to browse.

Risk Factors (5)
Loads a multi-source-flagged malware/exploit-kit domain (gixxipi9823.life)
Primary domain itself carries a malware threat-intel tag
Injected gambling/casino SEO spam links in page content indicating site compromise
Additional third-party resource (app.suitedash.com) flagged as phishing
Runtime code generation via Function() constructor
Domain age information unavailable

Details

Page Title

Something Blue – Wedding Specialists

Scan Type

public

Domain Name Analysis

The domain 'somethingblue.site' uses the .site top-level domain. Its registrable label 'somethingblue' stretches across 13 characters split between five vowels and 8 consonants. Tokenizing the label suggests 2 words: something, blue. The median word length lands at 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://somethingblue.site

Page Load Overview

75.18s
Total Load Time
9.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-GB
Text Length:131,416 chars
Detector Agreement:75%

Website Classification

Primary Category

blog personal website39% confidence
Type: spa
Method: ml+structural

All Detected Categories

blog personal website
39%
adult content
37%
social_media
25%
forum
20%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3292.113.23.224Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
18142.251.13.95Google · CDNUnited States
AS15169Google LLC
18147.135.84.14Oakton, Virginia, United States
AS16276OVH SAS
18157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
18142.251.127.84Google · CDNUnited States
AS15169Google LLC
1834.3.90.193Google · CDNGroningen, Groningen, Netherlands
AS43515Google Ireland Limited
1854.162.11.38Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
18142.251.20.97Google · CDNUnited States
AS15169Google LLC
18104.18.0.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1892.113.16.106Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
59032--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A743B573501E5D0A338BA394E2862609D3B89146D758FA7878BD112CA7EC9F530E6F1D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:a0dSUVqmjZdapI7hN8k8a+3t760PmCViUyaaCdyMTXvJEHPh8jBR:tSEqwapIhNNqSWyKBEvyjBR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:57420:JAgQBHGwHskBYECBCRwpIYjgAzWMrlDXAQNJAyBhJEKA0IoAMIUATaYlpsoQcQYAMDKYSCqgwUsVACBmyD6SE0CgFgL1AEJA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bf01017d3d010101
Perceptual Hash:8ad5349cd7f1348c
Difference Hash:090101c969090141
Wavelet Hash:ff4135ffbd010181
Color Hash:#2dd28d

Other Hashes

Crop Resistant:090101c969090141

Scan History

Scan history not available

Unable to load historical scan data