Security Scan Report: reallifeaccounting.com

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 10 HTTP transactions. The main domain is reallifeaccounting.com and was registered 27 years ago.

Submitted URL: https://reallifeaccounting.com/themelist0.html

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Decoy blog page on a re-purposed aged domain, matched to an analyst-vetted Microsoft 365 outage-lure phishing kit using ThemeList_Cloaker_WhitePage cloaking; treat any link from it as malicious.

Risk Factors (5)
Analyst-vetted malicious phishing kit identified on this URL (Microsoft 365 outage-lure campaign behind a SendGrid delivery path)
Cloaker-generated decoy blog (ThemeList_Cloaker_WhitePage) designed to show benign content to unwanted visitors while hiding the real phishing page
Base-36 beacon token mechanism used to detect/mark visitors for cloaked redirection
Long-dormant aged domain apparently re-purposed for a phishing campaign
Site identity ('The Fun Reel Photostream') unrelated to the article topic and inconsistent with a genuine publisher
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'reallifeaccounting.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'reallifeaccounting' is 18 characters long split between eight vowels and 10 consonants. Splitting it apart reveals 3 words: real, life, accounting. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

@ The Fun Reel Photostream Content collection Your Thoughts The Power of Mindfulness: Cultivating Presence in Everyday Life This article explores the benefits of mindfulness, practical techniques fo...

Page Load Overview

0.55s
Total Load Time
257 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:57%
Script:Latin
Direction:ltr

Detection Details

Text Length:6,717 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content49% confidence
Type: static
Method: ml+structural

All Detected Categories

adult content
49%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8172.67.205.201Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.61.38Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.127.95Google · CDNUnited States
AS15169Google LLC
2192.178.183.94Google · CDNUnited States
AS15169Google LLC
104--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A442F933DBC8337A125300EA22A967DA77B7811DE31209D466B8026C13E7D5592B7FDE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:5Q74aMTimoj/YurP7x6z1NYFQfuPgJx8nFOPPXMP4:44WEkcbYFwpJxVb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:13011:qglkXQIDkc8KQJeAYDNgRkApqEQABEQFoSMAATasIUXLcS0HQARSAECMhakAICQCQAqoUFxKAUQDyKqEFmIPVYI6A8DqgIwB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc3c3d3fbffe7c7
Perceptual Hash:ed6c929299dd9232
Difference Hash:3486869692688696
Wavelet Hash:dec3c2c2c2fec2c2
Color Hash:07600000010

Scan History

Scan history not available

Unable to load historical scan data