ScanMalware.com

Security Scan Report: lululemon.bttn.io

Redirected to:
https://shop.lululemon.com/
Submitted: Sep 19, 2026, 11:33:31 AMCompleted: Sep 19, 2026, 11:34:47 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/85795fbe-d018-408c-81b1-c01d4d5a4339Domain and IP registration (RDAP)/api/v1/rdap/85795fbe-d018-408c-81b1-c01d4d5a4339Certificate Transparency/api/v1/ct/shop.lululemon.comHow often this domain was scanned/api/v1/domain/stats/lululemon.bttn.ioScan history for this domain/api/v1/domain/history/lululemon.bttn.io?limit=15

This website contacted 44 IPs in 2 countries across 35 domains to perform 305 HTTP transactions. The main domain is shop.lululemon.com and was registered 12 years ago.

Submitted URL: https://lululemon.bttn.io

Effective URL:

https://shop.lululemon.com/
Redirected

The Cisco Umbrella rank of the primary domain is #52,470 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Entry host lululemon.bttn.io is a redirector that lands on the genuine lululemon store at shop.lululemon.com. No phishing forms, no malware, no threat-intel, YARA or IDS hits — this is the brand's own site.

Safety Factors (4)
Final destination shop.lululemon.com is the legitimate brand owner's domain
No credential or payment collection forms present
No threat-intel, YARA, or IDS hits
Self-branding consistent: page title/meta name 'lululemon' matching the destination brand
Domain age information unavailable

Details

Page Title

technical apparel + athletic shoes | lululemon

Scan Type

public

Domain Name Analysis

Within the British Indian Ocean Territory country-code top-level domain (.io), 'lululemon.bttn.io' is registered; it also runs on subdomain 'lululemon'. The second-level label 'bttn' is 4 characters long containing 0 vowels alongside four consonants. Segmentation suggests 2 words: bt, tn. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lululemon.bttn.io

Page Load Overview

18.02s
Total Load Time
38.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:14,696 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping56% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

e-commerce shopping
56%
corporate
35%
documentation technical
33%
adult content
27%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4723.58.104.154Akamai · CDNDüsseldorf, North Rhine-Westphalia, Germany
AS16625Akamai Technologies, Inc.
618.118.242.66Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
618.221.42.233Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
6104.18.10.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
613.33.217.187Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
695.100.110.24Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
695.100.110.3Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
6104.18.86.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.13.97Google · CDNUnited States
AS15169Google LLC
6104.18.87.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
30544--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10DD02373C090010B553759DDED42A6085FD5724DB4320C53B5C498D497C6D1ECC03388

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3:qVZxVsws+7L9Hv8+5BuFJYkAK3BbZ6i796FLUQFvgqt/wVX2S8K4FLfRRyIdlEba:qzxV/5VHHQYk/B96jLU8oqHNdxELa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:1b5869182bac508498075df5beaf67fd

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:810103030f7f7f7f
Difference Hash:8000000000000000
Wavelet Hash:00fff0f0f0f0f0f0
Color Hash:#bf9540

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data