Security Scan Report: orbooks.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 42 IPs in 3 countries across 29 domains to perform 132 HTTP transactions. The main domain is orbooks.com and was registered 24 years ago.

Submitted URL: https://orbooks.com/authors/r/patrick-ruffini/

AI Security Verdict

Safe Website

Confidence: 88%

1
Risk Score

Legitimate long-established independent publisher (OR Books) author page; self-branded, no credential/payment forms, no threat-intel, YARA or IDS hits. The low-confidence ML 'phishing' label is unsupported by the page evidence.

Safety Factors (6)
Established 24-year-old domain with standard hosting
Self-branding matches domain (OR Books) — no brand impersonation
No password or payment fields on the page
No Indicators of Compromise, no YARA matches, no IDS alerts
All third-party script hosts are popular/ranked services
Login and account links point to the site's own domain (orbooks.com/login.php)
Domain age information unavailable

Details

Page Title

Authors - r - Patrick Ruffini - OR Books

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'orbooks.com' is registered and has no subdomain. The core label 'orbooks' covers 7 characters with 3 vowels and 4 consonants. Word splitting yields 2 words: or, books. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://orbooks.com/authors/r/patrick-ruffini/

Page Load Overview

3.23s
Total Load Time
7.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,549 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam30% confidence
Type: spa
Method: ml+structural

All Detected Categories

phishing scam
30%
technology software
27%
e-commerce
20%

Detected Features

Search
Products
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3192.200.160.253United States
AS399566Bigcommerce Inc.
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
363.141.128.3United States
AS399566Bigcommerce Inc.
3185.172.148.132Germany
AS44239proinity GmbH
334.117.232.248Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
13242--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DB143AF75BF491A1A58387F5BBB375297C67106BB881C850B1EC4E4CAF93ECA0817948

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:s9QfAA82Mv2E6l/gIPflT0Q1vDDeWZus8Z5NulHn6o+u4bZ5NulHnoW2MTZ5Nulo:seAA82Mv2E6ZNqWZn8ZyoZyoWXZyxwZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:195710:URgLBFISAAQjY2gAAgIWZwXASUUE0hJ4CkABuUA6x5AkWQZBKnD3Ai0JlLiIGuGaZgAChATGRIAwNigBZABIRMfQAACMJMga

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00383c3830383000
Perceptual Hash:ce9e706131ce8d33
Difference Hash:5361616557636799
Wavelet Hash:313d3d3939393101
Color Hash:#2dd24e

Scan History

Scan history not available

Unable to load historical scan data