ScanMalware.com

Security Scan Report: refybeauty.com

Site favicon
Submitted: Oct 1, 2026, 11:07:12 AMCompleted: Oct 1, 2026, 11:09:09 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e2fbcf81-3992-4466-9419-3317966351e2Domain and IP registration (RDAP)/api/v1/rdap/e2fbcf81-3992-4466-9419-3317966351e2Certificate Transparency/api/v1/ct/refybeauty.comHow often this domain was scanned/api/v1/domain/stats/refybeauty.comScan history for this domain/api/v1/domain/history/refybeauty.com?limit=15

This website contacted 135 IPs in 9 countries across 79 domains to perform 1368 HTTP transactions. The main domain is refybeauty.com and was registered 30 years ago.

Submitted URL: https://refybeauty.com

The Cisco Umbrella rank of the primary domain is #447,652 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

Legitimate established e-commerce site for REFY beauty products. No credential forms, threat-intel hits, or malicious JavaScript. Network IDS alerts are informational only.

Safety Factors (5)
Established domain aged over 6 years
No credential or payment forms present
No threat-intel matches against the page or its resources
Self-branding matches the domain name
Content is consistent with a legitimate e-commerce makeup/skincare store
Domain age information unavailable

Details

Page Title

REFY | Simplifying Beauty | Vegan & Cruelty Free Makeup & Skincare

Scan Type

public

Domain Name Analysis

Domain 'refybeauty.com' uses the commercial generic top-level domain (.com) with no subdomain. The second-level label 'refybeauty' is 10 characters long holding four vowels versus six consonants. Splitting it apart reveals 3 words: ref, y, beauty. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://refybeauty.com

Page Load Overview

21.67s
Total Load Time
24.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:13,942 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping48% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
48%
corporate
35%
cryptocurrency blockchain
35%
finance banking
31%
blog personal website
29%

Detected Features

Search
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2823.227.38.65Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
1023.227.39.20Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
1023.227.39.200Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
10146.75.122.133Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
1023.59.17.83Akamai · CDNHamburg, Free and Hanseatic City of Hamburg, Germany
AS16625Akamai Technologies, Inc.
1023.52.181.3Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
10104.18.4.153Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1018.173.205.5Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1018.172.112.62Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
10146.75.123.52Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
1368135--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DE353BA2D4740C7F541344E5B0EA7B897264924786C6BCA17ADC0F2C4FCEEAE453BA1D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:XSCfNSJcloosrCM5ROIke/GWUEM7eEDt9hhi9r9fDavKwI+7pMZqiy+V:ZNSJ0oosOXs/GWUEM7eOplj+V

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1107750:ECigdaEVRyTCIBRJE0rgggMcBUGAEIwhABwJKxIBsCABaUVeLMIFgE4C4AKICJMgGsU6haQhDCFQEOpCi45rhEAoyi6FQBQn

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff40405858c0c1ff
Perceptual Hash:c862b72b9d0af722
Difference Hash:4b8791b3b393036c
Wavelet Hash:ff40c0d8d8c0c1ff
Color Hash:#40bf95

Other Hashes

Crop Resistant:0c0c10914c6c4810,f4bce8f8f0c3c7c7,e06a5ae0b0236121,193c3654bc38b8e0,930323cd4d154a02,8387b1b3b3939303

Scan History

Scan history not available

Unable to load historical scan data