ScanMalware.com

Security Scan Report: www.redmond-reporter.com

Submitted: Sep 29, 2026, 9:15:48 PMCompleted: Sep 29, 2026, 9:17:07 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b20d78e5-54ae-4342-adb1-3329b3d5ba1bDomain and IP registration (RDAP)/api/v1/rdap/b20d78e5-54ae-4342-adb1-3329b3d5ba1bCertificate Transparency/api/v1/ct/redmond-reporter.comHow often this domain was scanned/api/v1/domain/stats/redmond-reporter.comScan history for this domain/api/v1/domain/history/redmond-reporter.com?limit=15

This website contacted 162 IPs in 7 countries across 154 domains to perform 651 HTTP transactions. The main domain is redmond-reporter.com and was registered 31 years ago.

Submitted URL: https://www.redmond-reporter.com/2022/07/11/massive-earthquake-on-seattle-fault-would-bring-catastrophic-tsunami-waves/

AI Security Verdict

Low Risk

Confidence: 65%

3
Risk Score

Legitimate 19-year-old local news site with no forms, impersonation, or page-level malware. Only risk is a flagged third-party resource (malware IoC), a possible ad-injection exposure for visitors.

Risk Factors (1)
Third-party resource (websearcher-red.com) loaded by the page is flagged as OSX FlutterShell malware by two independent feeds — possible malvertising/ad-injection exposure for visitors
Safety Factors (7)
Established 19-year-old domain with legal information and bylined editorial content
Self-branding matches the domain; no impersonation of any third-party brand
No credential or payment forms, no disguised password fields
No JavaScript YARA malware, no high-precision YARA hits, no Suricata IDS alerts
No cross-origin credential exfiltration; cross-origin requests are standard ad/analytics/CDN traffic
Third-party script hosts are otherwise top-1M ranked legitimate ad-tech domains
Verdict names no specific threat, and DOM analysis found no password field (real or disguised) or payment field and no other hard signal — elevated score unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

Massive earthquake on Seattle Fault would bring catastrophic tsunami waves | Redmond Reporter

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.redmond-reporter.com' on the commercial generic top-level domain (.com) and includes subdomain 'www'. Count 16 characters in 'redmond-reporter' split between 5 vowels and 10 consonants; bonus characters include one hyphen. Segmentation suggests two words: redmond, reporter. Median word length comes out to 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.redmond-reporter.com/2022/07/11/massive-earthquake-on-seattle-fault-would-bring-catastrophic-tsunami-waves/

Page Load Overview

2.38s
Total Load Time
14.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:13,193 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism73% confidence
Type: spa
Method: ml+structural

All Detected Categories

news media journalism
73%
government public service
40%
corporate business
37%
news/blog
35%
corporate
35%

Detected Features

Search
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7192.0.66.43San Francisco, California, United States
AS2635Automattic, Inc
418.245.31.112Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4104.18.43.90Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4192.178.183.97Google · CDNUnited States
AS15169Google LLC
43.160.150.14Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
465.9.130.96Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
465.9.130.52Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4192.0.66.2San Francisco, California, United States
AS2635Automattic, Inc
418.66.147.35Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4104.18.15.29Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
651162--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A6143BB2A4C4203F191342D9E695F708F139C4E7DE8D5BD2B2AD97201BC6BE924A753C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:W/sUcQQIh6ZFQPE6ErgZVUE3/VcO1DTiTcHqiVlWQ6Ca:Mf6ZeRVUE3/7o0A

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:209214:QAMQ0IifXRiKgQlb4QHgQSifhChxXKQCk6JMAiGAJkRDAA2AEoBGrAQF4mUaMQBicCASQIgQEoAGCJABNqqwFAKSqsZR5AcA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffff000000
Perceptual Hash:b9d64f30720f5239
Difference Hash:97001042189dc313
Wavelet Hash:00ffffffff000000
Color Hash:#931f4e

Other Hashes

Crop Resistant:97001042189dc313,0141919191912181,849ce30383330c03

Scan History

Scan history not available

Unable to load historical scan data