Security Scan Report: rea.tools

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 2 domains to perform 10 HTTP transactions. The main domain is rea.tools and was registered 3 weeks ago.

Submitted URL: https://rea.tools/

AI Security Verdict

Moderate Risk

Confidence: 62%

4
Risk Score

Self-branded developer-tool site for a 3-day-old domain; no forms, no impersonation, no threat-intel, hunting rule or IDS hits. Content looks like real product docs; caution warranted only because the domain is new.

Risk Factors (2)
Very young domain (3 days old) with no established reputation
Site prompts users to paste a setup instruction into their coding agent to install and run a remote npm package (npx rea-agents@latest), an agent/CLI install pattern that warrants care
Safety Factors (5)
Page displays its own brand (self-branding), matching its domain — no impersonation of any other entity
No forms whatsoever: no credential, password, payment or email harvesting fields
No Indicators of Compromise, hunting rule malware, IDS alerts or Safe Browsing threats
All JavaScript served from the site's own domain; no third-party script hosts
Content reads like a genuine developer-tool documentation site: guides, blog, FAQ, showcases and interactive examples
Domain age information unavailable

Details

Page Title

REA — Reverse Engineering for Your Coding Agent

Scan Type

public

Domain Name Analysis

The domain name 'rea.tools' uses the .tools top-level domain without a subdomain. The registrable portion 'rea' spans 3 characters holding two vowels versus 1 consonant. Tokenizing the label suggests two words: re, a. Average segment length settles at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rea.tools/

Page Load Overview

0.74s
Total Load Time
36 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:10,533 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software72% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
72%
documentation technical
38%
corporate
25%

Detected Features

Comments
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.21.24.172Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3140.82.121.5Frankfurt am Main, Hesse, Germany
AS36459GitHub, Inc.
3172.67.219.196Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
103--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12E2306B260F125370123C2DE62A67B2ABFD5E157E489244037AD4FE59FD3C86E81306A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:zh6VzWb+2FbOmVM4yScSMg1QpSGG6DFypKU3p7rZY6g:zyzWb+mbbflcSMMQpSGKpKU57rSj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:45883:HDmYaam6AAlBEIYSoADglgSGBlAEQoQQCTGokApAWAJRMDC9gMFIDIFIeQRAYDAgoDAcdEkVEDBWMNNSLVEQKCAMhQAJwCEC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffd3c1919fffcfff
Perceptual Hash:ec6c939292656d6c
Difference Hash:2827272731121a36
Wavelet Hash:fa81819193ff838b
Color Hash:#3a4378

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data