Security Scan Report: www.bluehorizons.travel

Submitted: Sep 16, 2026, 10:47:37 AMCompleted: Sep 16, 2026, 10:49:29 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

URL /daemonx on an established travel domain is flagged as a malware download and matches a critical IDS alert for an ELF executable download — a likely compromised site serving malware. Avoid.

Risk Factors
URL reported for hosting a malware download (URLhaus)
Critical network IDS alert for ELF executable download on the same path
Suspicious bare path (/daemonx) with no UI, text, or legitimate page content
Likely compromised legitimate domain being abused to distribute malware
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.bluehorizons.travel' on the .travel top-level domain, featuring subdomain 'www'. The registrable portion 'bluehorizons' spans 12 characters split between five vowels and seven consonants. Splitting it apart reveals two words: blue, horizons. The median word length lands at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.bluehorizons.travel/daemonx

Page Load Overview

87.02s
Total Load Time
12.5 MB
Total Size

Language Analysis

Primary Language

🇧🇩Bengali
Code: bn
Confidence:100%
Script:Unknown
Direction:ltr

Detection Details

Text Length:497,183 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical79% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
79%
adult content
69%
finance banking
64%
documentation technical
61%
news media journalism
55%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
169.48.190.19Singapore
AS204800WHG Hosting Services Ltd
11--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T184F684F3A61A13CEADDA938F5DB5ACE60743FD102121C08D76A4369171D902E83DFAD6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

98304:7E+64Cfu6A8hALAWgwfA0b9vlqUJFSb6n1PTVdb:7E74C9j+x8YN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:15388216:GSERzCNJAiBCEBCwAE1QiqKAmAhEQgnhWGgAFAQAAJTgDDFsroABQaJBiAgYU1cZjMENIIEoNAJCZdhG0ARAhCIgICXioBBF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0100007f7f3f7f7f
Perceptual Hash:807f7fc580063f78
Difference Hash:7b0b7ded80e7e3e3
Wavelet Hash:000000377f3f7f7f
Color Hash:#c5aa87

Other Hashes

Crop Resistant:7b0b7ded80e7e3e3

Scan History

Scan history not available

Unable to load historical scan data