ScanMalware.com

Security Scan Report: 1weatherapp.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5efa5569-d4ec-411e-88d2-108c95ae92e2Domain and IP registration (RDAP)/api/v1/rdap/5efa5569-d4ec-411e-88d2-108c95ae92e2How often this domain was scanned/api/v1/domain/stats/1weatherapp.comScan history for this domain/api/v1/domain/history/1weatherapp.com?limit=15
This website contacted 65 IPs in 6 countries across 45 domains to perform 397 HTTP transactions. The main domain is 1weatherapp.com and was registered 15 years ago.

Submitted URL: https://1weatherapp.com/articles/EN/US/hartford/winter-weather--super-el-nio-and-polar-vortex-may-impact-us-weather--b968e413-d1c1-43b5-8f80-c33bc1d9e9d9?home=true

The Cisco Umbrella rank of the primary domain is #318,912 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 62%

4
Risk Score

Established 1Weather content page with no forms or brand impersonation; rated moderate only because its ad stack links to a third-party domain flagged as OSX malware.

Risk Factors (3)
Page carries an outbound reference to tick.fashvision.com, corroborated by two independent feeds as an OSX malware indicator
Ad-monetised content page with a long cross-domain redirect chain (analytics → doubleclick → adsafeprotected), a common malvertising delivery path
Large third-party script surface (17 external JS hosts) that the site owner does not directly control
Safety Factors (5)
Established, 15-year-old domain with visible business entity and physical address — legitimacy score 48/100 rated 'likely legitimate business'
Site displays only its own brand ('1Weather' matching 1weatherapp.com); no impersonation of a different entity
No credential or payment forms anywhere on the page — no password, card or CVV fields
No JavaScript malware hunting-rule matches, no high-precision native-hunting-rule hits, no known-kit roster match, no credential exfiltration
Threat-intel indicator is an external link, not a primary-domain IoC; no Safe Browsing or malware/phishing IDS alert
Domain age information unavailable

Details

Page Title

1Weather: Your Go-To App for Accurate Weather Forecasts and Updates

Scan Type

public

Domain Name Analysis

Domain '1weatherapp.com' uses the commercial generic top-level domain (.com) without a subdomain. Count 11 characters in '1weatherapp' containing four vowels alongside 6 consonants, plus one digit. Splitting it apart reveals three words: 1, weather, app. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

© How your data is used ‘Your privacy preferences are important. That's why, based on legitimate interest, we and our partners process and share only jimited data ‘such as your device type and conten...

Page Load Overview

1.70s
Total Load Time
13.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:72,176 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(51%)🇩🇪de(49%)

Website Classification

Primary Category

news media journalism38% confidence
Type: spa
Method: ml+structural

All Detected Categories

news media journalism
38%
corporate
25%
forum
20%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
75146.75.121.44Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
6334.120.60.42Google · CDNKansas City, Missouri, United States
AS396982Google LLC
33108.138.26.114Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2835.214.168.80Google · CDNGroningen, Groningen, Netherlands
AS15169Google LLC
1834.111.60.239Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1565.9.130.35Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
14141.226.228.48Netherlands
AS200478Taboola.com ltd
8142.251.14.94Google · CDNUnited States
AS15169Google LLC
8142.250.154.155Google · CDNUnited States
AS15169Google LLC
718.64.211.99Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
39765--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CB451C32F440262F927B45C8FA95A71E7299A31FF5854860E1DA0328C7DEDE8741F39B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:9wzJzxdDY362QLSvCKDy39TiBVlBSYaAM:2Z2Bo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1204791:BAwIVcQBEMMAAIIorigoiAgBWJsAwAlhBAC4AEZGGBoLAjVTMghKriI6gwBo4EhgCBekIjAVxgkYEqsIByQEAEAEWV1eHBCR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7e7f77fe7
Perceptual Hash:b37389ce7221ec8c
Difference Hash:cc4d4d4d4d0cd8cc
Wavelet Hash:46c6e6e6e6262606
Color Hash:07403000040

Other Hashes

Crop Resistant:cc4d4d4d4d0cd8cc,f0e0c7227abba085,717171717171703b

Scan History

Scan history not available

Unable to load historical scan data