ScanMalware.com

Security Scan Report: www.wheresthematch.com

Site favicon
Submitted: Sep 24, 2026, 12:19:13 AMCompleted: Sep 24, 2026, 12:20:31 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e3604e37-dbd5-4881-a202-586f9461fa16Domain and IP registration (RDAP)/api/v1/rdap/e3604e37-dbd5-4881-a202-586f9461fa16Certificate Transparency/api/v1/ct/wheresthematch.comHow often this domain was scanned/api/v1/domain/stats/wheresthematch.comScan history for this domain/api/v1/domain/history/wheresthematch.com?limit=15

This website contacted 140 IPs in 9 countries across 109 domains to perform 432 HTTP transactions. The main domain is wheresthematch.com and was registered 15 years ago.

Submitted URL: https://www.wheresthematch.com

The Cisco Umbrella rank of the primary domain is #511,629 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 85%

2
Risk Score

Established 19-year-old UK sports TV guide presenting its own brand. No credential/payment forms, no impersonation, no content-malware or YARA evidence. Threat-intel hits are generic abuse-reputation tags on third-party ad IPs. Low risk.

Risk Factors
Excessive redirect chain: 45 redirects (33 cross-domain), largely attributable to heavy advertising/analytics networks (doubleclick, Amazon Ads, Teads, FreeWheel)
eval() and Function() constructor usage detected in JavaScript (common in ad/tag-manager scripts but a dynamic-code signal)
High-severity IDS alert: ET DNS Query for .to TLD (x2) — informational 'potentially bad traffic' category, not a malware/phishing signature
Safety Factors
Well-established domain (19 years old, WELL_ESTABLISHED category)
Self-branding detected — title/meta match the domain, no impersonation of another entity
No credential-harvesting or payment forms present
No YARA malware patterns, no known malicious kit, no Safe Browsing hit
Business legitimacy indicators: physical address, business entity, legal/company registration
Content is a legitimate sports TV schedule guide (entertainment media, 71% classifier confidence)
Domain age information unavailable

Details

Page Title

WherestheMatch.com - The Ultimate Live Sport on TV Guide

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.wheresthematch.com' is registered with subdomain 'www'. The second-level label 'wheresthematch' is 14 characters long with 4 vowels and ten consonants. Breaking it apart gives four words: where, s, the, match. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.wheresthematch.com

Page Load Overview

6.73s
Total Load Time
4.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:14,053 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media71% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
71%
adult content
36%
news media journalism
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1577.68.93.186United Kingdom
AS8560IONOS SE
3185.111.111.157Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
3185.111.111.154Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
352.28.242.162Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
3185.111.111.156Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
363.186.177.209Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
33.160.150.61Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
33.160.150.36Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
320.250.198.32Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
432140--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13F313DBB7404C8491B46C3B2ABAAB15CD10F231EDE94ACE0E9E75628A4583F348A155E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hR05uNpS6APHfqh80pANApGZgGdN/8N/DKN/nwN/GEd/PdDCWM7QXz4aRWgbnnwR:Tuu7S6ZRiNENbKN4NtK7ANwwgBx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1825:AAAgAAAAAAYAAAAiADGCAAAAAAAEhAAAAEIAAABAAIAAAhAAAAgAABACgAAAAQIAAAKAISAQAAFAQgAEAAgAAAQCRAAABAEA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000000ffffff
Perceptual Hash:c03be4b16eb1e01f
Difference Hash:5df1d5d5e48abaa6
Wavelet Hash:00003c003cffffff
Color Hash:#40bf62

Other Hashes

Crop Resistant:cbcbe0c1c0c0c8c6,cc0c4953c3802525,59f1d4d4e48abaa6

Scan History

Scan history not available

Unable to load historical scan data