Security Scan Report: forever22.store

Redirected to:
https://www.forever22medspa.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 35 IPs in 2 countries across 18 domains to perform 120 HTTP transactions. The main domain is forever22.store and was registered 2 years 7 months ago.

Submitted URL: https://forever22.store/

Effective URL:
https://www.forever22medspa.com/
Redirected

AI Security Verdict

Safe Website

Confidence: 87%

0
Risk Score

Redirect lands on a self-branded med spa site with no credential/payment forms, no impersonation, and no threat-intel, hunting rule, or IDS hits; appears legitimate.

Safety Factors (5)
Self-branding detected: site title and meta tags match the Forever 22 domain.
No credential or payment collection forms.
No threat-intelligence, hunting rule, IDS, or Safe Browsing evidence of malicious activity.
Physical business address and detailed service descriptions are visible.
Cross-domain redirect is consistent with an ordinary domain move or marketing redirect and does not itself indicate risk.
Domain age information unavailable

Details

Page Title

Forever 22 Med Spa | Medical Spa | Valley City, OH

Scan Type

public

Domain Name Analysis

The domain name 'forever22.store' uses the .store top-level domain with no subdomain. The core label 'forever22' covers 9 characters containing 3 vowels alongside 4 consonants; bonus characters include two digits. Segmentation suggests two words: forever, 22. Expect 4.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Q 6677 Center Ra. Valley City, OH 44280 . I HOME SERVICES vy ABOUTUS FINANCING SHOP EVENTS MEMBERSHIP CONTACT US % JUVEDER™ f°) VOLBELLA Xe ————— IDOCAINE INJECTABLE Get WITH L

Page Load Overview

4.92s
Total Load Time
5.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:6,536 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical70% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
70%
adult content
28%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1813.248.175.166Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
335.172.94.1Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
3108.138.7.63Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
354.192.35.106Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
354.192.35.11Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
313.32.121.60Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
318.173.205.109Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3142.251.14.97Google · CDNUnited States
AS15169Google LLC
3216.239.32.36Google · CDNUnited States
AS15169Google LLC
318.244.20.158Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
12035--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D7041851F5681837921382FF7327BB9EE2B4D15BCB0109A07A9E43705BCEDA17A63B14

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:iJGor9XqyWPm3S7AnpikCUd93eXAXsptCkcfgVo9F72RDRERURIR7RbR5RDRER3a:QGor9XqyPWcbSHdCfErq/1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:183919:gQMyJoQyDUVADDAaxAsWAQ7IBUREJABwCCoGgTgTICAKiRrJFhIAVqhRIlQAQPCApEZgQoBcHQAH5AgIYBus0BnoFIAXjAIQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00041f1f0f1d1f0f
Perceptual Hash:9865654a6da4cabd
Difference Hash:c3bdbcbd39393d39
Wavelet Hash:01071f1f0f1d1f1f
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data