Security Scan Report: www.geostar.space

Redirected to:
https://geostar.space/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 6 countries across 14 domains to perform 91 HTTP transactions. The main domain is geostar.space and was registered 1 year 4 months ago.

Submitted URL: https://www.geostar.space

Effective URL:
https://geostar.space/
Redirected

AI Security Verdict

High Risk

Confidence: 55%

7
Risk Score

Genuine-looking GNSS software vendor with only a contact form and no impersonation; the sole concern is a single-source, unverified 'IClickFix' threat-intel report on the domain, so treat with caution.

Risk Factors (2)
Single-source, unverified threat-intelligence report of 'IClickFix' on the primary domain — the only concrete negative signal; could reflect a past/partial compromise or a mis-submission
Domain is absent from Cisco Umbrella top 1M, so reputation cannot be corroborated either way
Domain age information unavailable

Details

Page Title

GEOSTAR — precise navigation software, RTK, PPP, PPP-RTK, VRS for agritech, automotive and beyond

Scan Type

public

Domain Name Analysis

Domain 'www.geostar.space' uses the .space top-level domain, featuring subdomain 'www'. The second-level label 'geostar' is 7 characters long split between 3 vowels and four consonants. It segments into two words: geo, star. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.geostar.space

Page Load Overview

10.04s
Total Load Time
8.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:5,823 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software80% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
80%
government public service
31%
adult content
29%
documentation technical
25%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10194.48.203.18United Arab Emirates
AS205282Tilda Platform Cloud Services Co. L.L.C
9194.48.203.181United Arab Emirates
AS205282Tilda Platform Cloud Services Co. L.L.C
992.223.124.62Frankfurt am Main, Hesse, Germany
AS199524G-Core Labs S.A.
9104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
946.102.104.4Netherlands
AS202614Kinescope B.V.
9192.178.183.100Google · CDNUnited States
AS15169Google LLC
9192.178.183.139Google · CDNUnited States
AS15169Google LLC
95.181.161.226Kyiv, Kyiv City, Ukraine
AS205282Tilda Platform Cloud Services Co. L.L.C
946.102.104.52Netherlands
AS202614Kinescope B.V.
9193.238.46.71Russia
AS212236Kinescope LLC
9110--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T132746222B6457C1BC00399CF41EAD5253329FB92CF0B13C5F3855A7D6BAA9A02CBBD54

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:MbIMZtPblsOEeC5VsWr7Jka/OV2fG8hWbjeUoo5kWUAXcLM:bMZtPbrEeC5VEB8hWbjeUoo5bXcLM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:348570:QQI2Jhh2kQIVEoAQrAkBEGAFNQqiADQEUkeTGLBbAANiwqTkEJAA1KCbAykRU5oRoAFQUIGokoKUbEwQxCIBCCQIIVgzAyDA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:303000f8fc0e0700
Perceptual Hash:cecc3c9cccf1311a
Difference Hash:25e531c1e11c8f19
Wavelet Hash:b93911f9fd0f0701
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data