ScanMalware.com

Security Scan Report: loir.io

Site favicon
Submitted: Completed: publiccompleted

AI Security Verdict

Low Risk

Confidence: 62%

2
Risk Score

Young unranked domain but clean content: a self-branded movie/TV database profile page with a search form and no credential or payment fields, no IoCs, YARA or IDS hits. Only weak priors present.

Risk Factors (2)
Domain is 19 days old (very new) — weak prior only
Unranked in Cisco Umbrella with low business-legitimacy score (8/100)
Safety Factors (6)
Self-branding: title/meta reference 'loir' which matches the domain loir.io
No password, payment, or disguised credential fields (verified from captured DOM)
No Indicators of Compromise, no YARA malware patterns, no known-kit roster match, no IDS alerts
No cross-origin form submissions and no cross-origin script hosts; no credential exfiltration detected
No brand impersonation of any third party; content is informational filmmaker database material
Physical address indicator present
Domain age information unavailable

Details

Page Title

Channing Tatum · Loir

Scan Type

public

Domain Name Analysis

The domain name 'loir.io' uses the British Indian Ocean Territory country-code top-level domain (.io) without a subdomain. The second-level label 'loir' is 4 characters long with 2 vowels and 2 consonants. Tokenizing the label suggests 1 word: loir. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://loir.io/person/38673

Page Load Overview

6.12s
Total Load Time
4.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,317 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media52% confidence
Type: static
Method: ml+structural

All Detected Categories

entertainment media
52%
social media network
42%
adult content
35%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
80104.21.62.141Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
80172.67.136.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1602--

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14C14E73296802A3F610382D3747D3722F5EF0E8CEE598511DFAE425452B7CE6B63E685

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:F3SVSkmSfWX+1O91lSHOFqVb9lQ412E7+3cqCTBe6umE5pbFHKFgqSv9u9PljqgD:MjqgTlGsBZVOox

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:200927:wVwKNYeAzoikEFRAWIAQACAGIhiAXSHDMFiJCL4EF7scNCxMSDAWhAWJYIQioAAs5aAKJAFLMIi9AOoGAdERSiGogLAQLQAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:40e0e0e040007e7c
Perceptual Hash:c0609f1f239d3e8d
Difference Hash:9991919191e8f2c8
Wavelet Hash:40f8e0f8603c7e7e
Color Hash:#c58b87

Other Hashes

Crop Resistant:8e37331f2b1e2db9,19b544795d999a9a,d8d2a8c9c9e984c6,9991919191e8f2c8

Scan History

Scan history not available

Unable to load historical scan data