Security Scan Report: classification.orionsec.io

Redirected to:
https://classification.orionsec.io/docs
Site favicon
Submitted: Sep 18, 2026, 5:10:52 AMCompleted: Sep 18, 2026, 5:11:12 AMpubliccompleted

This website contacted 6 IPs in 1 country across 3 domains to perform 6 HTTP transactions. The main domain is classification.orionsec.io and was registered 7 years ago.

Submitted URL: https://classification.orionsec.io

Effective URL:

https://classification.orionsec.io/docs
Redirected

The Cisco Umbrella rank of the primary domain is #109,112 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Legitimate self-hosted Swagger UI API documentation for Orion Classification Service. No forms, no IoCs, no malware, no impersonation; established 3-year-old domain with clean technical content.

Safety Factors (4)
Domain operating for ~3 years with no malicious history
Content is self-branded API documentation (Orion) matching its own domain
No credential or payment collection of any kind
No obfuscated JavaScript, no external form actions, no tracker/exfiltration sinks
Domain age information unavailable

Details

Page Title

Swagger UI

Scan Type

public

Domain Name Analysis

The domain name 'classification.orionsec.io' uses the British Indian Ocean Territory country-code top-level domain (.io) and includes subdomain 'classification'. The second-level label 'orionsec' is 8 characters long with four vowels and 4 consonants. Breaking it apart gives two words: orion, sec. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://classification.orionsec.io

Page Load Overview

1.26s
Total Load Time
462 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:29%
Script:Latin
Direction:ltr

Detection Details

Text Length:918 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software54% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
54%
documentation technical
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
132.196.232.45Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1151.101.1.229Fastly · CDNUnited States
AS54113Fastly, Inc.
118.214.163.207Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.66.45.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
66--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T107F0DC6286F0AF04729821CDAC91340C8C3BC1DF4A1488C936D20A5D3FA8FB784EF11C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:haxey7a70Dd1ty60h2ybQEdXPLd1tXvVI:haACawDd1M8URdd1JvVI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:42a4f208301068a202153a4974556472

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8fffbf818181bf83
Perceptual Hash:bfd1f03b3c203ec0
Difference Hash:3850717373717333
Wavelet Hash:8fbfbf8181819d81
Color Hash:#bf8240

Other Hashes

Crop Resistant:3850717373717333

Scan History

Scan history not available

Unable to load historical scan data