ScanMalware.com

Security Scan Report: gel.bloat.cat

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/624ebdf6-5973-4228-bd43-58ce12a85365Domain and IP registration (RDAP)/api/v1/rdap/624ebdf6-5973-4228-bd43-58ce12a85365How often this domain was scanned/api/v1/domain/stats/gel.bloat.catScan history for this domain/api/v1/domain/history/gel.bloat.cat?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 44 HTTP transactions. The main domain is bloat.cat and was registered 2 years 10 months ago.

Submitted URL: https://gel.bloat.cat/

The Cisco Umbrella rank of the primary domain is #402,740 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 75%

1
Risk Score

Self-hosted Gelbooru frontend behind an Anubis anti-bot challenge; search-only form, no credential/payment collection, no threat-intel, YARA or IDS hits. No malicious signals found.

Safety Factors (5)
Domain age ~2.9 years (well-established, minimal risk category)
No credential, password or payment fields; the single form is a search form
No Indicators of Compromise, YARA, IDS, Safe Browsing or threat-intel hits
All JavaScript served from the site's own domain; no cross-origin credential handling
No brand impersonation — page describes itself as a frontend for Gelbooru on its own hostname
Domain age information unavailable

Details

Page Title

Gelbooru-Go

Scan Type

public

Domain Name Analysis

Domain 'gel.bloat.cat' uses the .cat top-level domain with subdomain 'gel'. The core label 'bloat' covers 5 characters holding two vowels versus 3 consonants. Breaking it apart gives one word: bloat. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://gel.bloat.cat/

Page Load Overview

0.31s
Total Load Time
925 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:70%
Script:Latin
Direction:ltr

Detection Details

Text Length:149 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software30% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
44194.62.248.14Germany
AS203446SMARTNET Germany GmbH
441--

Detected Technologies2

Nginx
40%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13D52FF718DB4903BD0E291A495219C9E1D5096CBE9220D9CB2AD07D1DFE7EA39C63CBC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:zFl/hMBhg7wuZk/tPmPAuMSUqZmqoLdBrEfPkVO77wuJVDYe64mbRh9RM:JzoqtXeHQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:13644:IRhDjIQkwBpIAjMiUCpgQiNBIwiZgAsFxLgoEqkEAhBBEg+ZEGEEcqA4DSS1IhwBaACmYiEqEIAQghoAAAEkkAwmwKBEwIRF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data