ScanMalware.com

Security Scan Report: helenair.com

Site favicon
Submitted: May 2, 2026, 4:35:22 AMCompleted: May 2, 2026, 4:36:59 AMpubliccompleted
Loading additional data...

Summary

This website contacted 14 IPs in 3 countries across 14 domains to perform 115 HTTP transactions. The main domain is helenair.com and was registered NaN years ago.

Submitted URL: https://helenair.com/news/state-regional/government-politics/article_9f0ef73c-4b0f-486b-9e74-c3741e54cc71.html

AI Security Verdict

Moderate Risk

Confidence: 85%

5
Risk Score

The site hosts many hidden password and payment fields on a news article, indicating credential phishing; avoid and report.

Risk Factors
Disguised password fields
Payment fields on non‑commerce content
Excessive number of forms on an article page
Unicode evasion in form inputs
Unranked domain reputation
Safety Factors
Domain age > 10 years (well‑established)
No malicious Indicators of Compromise detected
No JavaScript malware YARA matches
No network IDS alerts
Page identified as a news article (og:type=article)
Established domain (10662 days old) with no strong malicious indicators — risk clamped from 8 to 5
Domain age information unavailable

Details

Page Title

Pete Buttigieg to stump for the 'Montana Plan' next month

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

blog personal website

(73%)

Domain Information

Within the commercial generic top-level domain (.com), 'helenair.com' is registered while skipping any subdomain. The core label 'helenair' covers 8 characters with four vowels and four consonants. It segments into two words: helen, air. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://helenair.com/news/state-regional/government-politics/article_9f0ef73c-4b0f-486b-9e74-c3741e54cc71.html

Page Load Overview

6.62s
Total Load Time
138
HTTP Requests
18
Domains
2.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:25,804 chars
Detector Agreement:100%

Website Classification

Primary Category

blog personal website73% confidence
Type: webapp
Method: ml+structural

All Detected Categories

blog personal website
73%
government public service
69%
news media journalism
63%
social media network
59%
technology software
55%

Detected Features

Login Form
Search
Articles
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21192.104.182.109United States
AS10668Lee Enterprises, Incorporated
9104.16.133.24United States
AS13335Cloudflare, Inc.
9142.251.110.94United States
AS15169Google LLC
9104.18.20.206United States
AS13335Cloudflare, Inc.
917.253.57.210Frankfurt am Main, Hesse, Germany
AS6185Apple Inc.
965.9.175.125United States
AS16509Amazon.com, Inc.
9146.75.120.157Frankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
9142.251.13.97United States
AS15169Google LLC
9192.178.183.190United States
AS15169Google LLC
965.8.131.86United States
AS16509Amazon.com, Inc.
13814--

Detected Technologies4

PasswordField
100%
TownNews
40%
HSTS
40%
Google Tag Manager
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FDE4073170F02076029701D6EA66BB5979B3D347C99696DCF2BC87B02FC7D9AA81706C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:f6SkRu/5zhPd7IYxQeAwG5OWq6Mp+DvFOxeyUG4OJV:CRKG5w6jDvFOx+sV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:670433:FUK5ZJubASAPORAGEkS70UGIQqEsBZJgAZAAJhASQgNhgABTJYUgBWisYEDDCgWRoKSAQiITBAiUIsEmN2oRBmIgHKCINLED

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000000007dffff
Perceptual Hash:c22df4430bfc29d6
Difference Hash:83c109c1d9d93c8c
Wavelet Hash:410100007cffffff
Color Hash:#87c58a

Other Hashes

Crop Resistant:83c109c1d9d93c8c,8383094107c9d9d9

Scan History

Scan history not available

Unable to load historical scan data