Security Report: check-2qqqjty3t.devwatchstack.homes - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/04e8d054-be21-4f48-8aae-854d2741785d Domain and IP registration (RDAP)/api/v1/rdap/04e8d054-be21-4f48-8aae-854d2741785d Certificate Transparency/api/v1/ct/check-2qqqjty3t.devwatchstack.homes How often this domain was scanned/api/v1/domain/stats/check-2qqqjty3t.devwatchstack.homes Scan history for this domain/api/v1/domain/history/check-2qqqjty3t.devwatchstack.homes?limit=15

This website contacted 9 IPs in 1 country across 6 domains to perform 14 HTTP transactions. The main domain is check-2qqqjty3t.devwatchstack.homes and was registered 3 years ago.

Submitted URL: https://check-2qqqjty3t.devwatchstack.homes/?address=7eRSLw9D8BvBkfG285wusq3nXmS5JJkSgeepdsaQpump

AI Security Verdict

Low Risk

Confidence: 76%

Risk Score

3-day-old, unranked domain (check-2qqqjty3t.devwatchstack.homes) reported for phishing, returning 'Access denied' to casual visitors while prompting wallet connection — high-risk cloaked crypto phishing pattern; avoid connecting any wallet.

Risk Factors (6)

3-day-old domain with no established reputation

Phishing threat-intel report on the primary scanned domain

Randomised campaign-style subdomain with address parameter

Cloaked response ("Access denied") for non-targeted visitors

Prompts visitors to connect a Solana wallet before showing results (wallet-drainer phishing pattern)

Function() constructor code generation detected in JavaScript

Safety Factors (5)

No credential, password, or payment forms present in the DOM (0 forms, 0 password fields, 0 payment fields)

No JavaScript/YARA malware patterns detected

No cross-origin credential exfiltration observed

Uses legitimate RPC/CDN resources (pump.fun API, Google Fonts, Helius RPC)

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 8 to 3

Domain age information unavailable

Details

Page Title

DEVWATCH — Analysis: 7eRSLw9D...pump

Scan Type

public

Favicon Hash

MMH3: 1051558944

MD5: 2010b80e2ec9ace8f950311195a66d50

Domain Name Analysis

You're looking at domain 'check-2qqqjty3t.devwatchstack.homes' on the .homes top-level domain and includes subdomain 'check-2qqqjty3t'. The second-level label 'devwatchstack' is 13 characters long holding three vowels versus ten consonants. Tokenizing the label suggests three words: dev, watch, stack. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

19.89s

Total Load Time

188 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:2,888 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence

Type: static

Method: structural

All Detected Categories

corporate

50%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.21.79.153Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	192.178.183.95Google · CDN	United States	AS15169Google LLC
1	172.67.146.115Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.64.151.87Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.14.94Google · CDN	United States	AS15169Google LLC
1	104.18.34.22Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.13.95Google · CDN	United States	AS15169Google LLC
14	9	-	-