Security Scan Report: stayupsubs.store

Submitted: Mar 18, 2026, 11:26:37 AMCompleted: Mar 18, 2026, 11:27:44 AMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 2 countries across 3 domains to perform 9 HTTP transactions. The main domain is stayupsubs.store and was registered NaN years ago.

Submitted URL: https://stayupsubs.store/checkout?product=Spotify

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

Likely fraudulent checkout for Spotify subscriptions; do not provide any information.

Risk Factors
Brand new domain (<7 days) – high likelihood of phishing or fraud
Potential brand impersonation by offering Spotify subscriptions
Form collecting email on a checkout page without visible payment fields (suspicious data collection)
Domain is unranked in Cisco Umbrella (not in top 1M) and has low reputation
Domain age information unavailable

Details

Page Title

إتمام الطلب | STAYUPSUBS

Scan Type

public

Language

🇸🇦

Arabic

(80% confidence)

Category

social media network

(97%)

Domain Information

Domain 'stayupsubs.store' uses the .store top-level domain with no subdomain. The second-level label 'stayupsubs' is 10 characters long with 3 vowels and 7 consonants. Splitting it apart reveals 3 words: stay, up, subs. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://stayupsubs.store/checkout?product=Spotify

Page Load Overview

1.31s
Total Load Time
9
HTTP Requests
3
Domains
49 KB
Total Size

Language Analysis

Primary Language

🇸🇦Arabic
Code: ar
Confidence:80%
Script:Arabic
Direction:rtl

Detection Details

Language Code:ar
Detection Confidence:80%
Script Type:Arabic
HTML Lang Attribute:ar
Text Length:1,025 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network97% confidence
Type: static
Method: ml+structural

All Detected Categories

social media network
97%
e-commerce shopping
84%
entertainment media
81%
cryptocurrency blockchain
49%
finance banking
45%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3142.251.141.99United States
AS15169Google LLC
363.176.8.218Frankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
3142.250.186.42United States
AS15169Google LLC
93--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1707265285062841155C78EEBB2EB5111D8B8B603DA06EED8F83C47E1DFDE8B6C737528

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:gpW3zF5gbFryRxunfdRq+lk6cqnCKJe8FbAEPHgQR1i7iTk61OYoETsY0hc43i5I:TFYFh8j8FbALwi7iY6I1mEC6t

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16624:DQCxAIpaANxKuwRWBLgADkAEDgWTBqMgISBMtSCgGCTGFghYEmCG3QggE6QOyIZDjAcAYNUWARwEYAAUhQCpxWcFqQWxERSB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0119391919091919
Perceptual Hash:8acc2233ed2f269b
Difference Hash:8331317131397971
Wavelet Hash:41393d3d3d193939
Color Hash:#79add2

Other Hashes

Crop Resistant:8331313131397931

Scan History

Scan history not available

Unable to load historical scan data