ScanMalware.com

Security Scan Report: soza33.sbs

Submitted: Oct 12, 2026, 10:25:06 AMCompleted: Oct 12, 2026, 10:25:45 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

A 44-day-old, unranked .sbs domain serving only a fake 'human verification' puzzle gate at a randomized URL. No credential or payment form, no impersonation, no malware or threat-intel hit, so risk is moderate, but there is no legitimate reason to interact.

Risk Factors (4)
Unknown, unverified site identity on a 44-day-old, unranked .sbs domain
Opaque randomized URL path with no navigational or descriptive structure
Fake CAPTCHA/human-verification gate with no plausible purpose, a common pattern for routing users onward to scams, unwanted push notifications or spam
No about/contact/legal content of any kind
Safety Factors (4)
No credential, login or payment form present (password, disguised-password and payment field counts all zero)
No brand impersonation — the page claims no other entity's identity and the title is generic
No Indicators of Compromise, no JavaScript YARA matches, no network IDS alerts
No cross-origin credential exfiltration; all scripts originate from the page's own domain
Domain age information unavailable

Details

Page Title

Human Verification

Scan Type

public

Domain Name Analysis

Domain 'soza33.sbs' uses the .sbs top-level domain with no subdomain. Its registrable label 'soza33' stretches across 6 characters split between 2 vowels and two consonants, notching 2 digits. It segments into 3 words: so, za, 33. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://soza33.sbs/GCt0ZJhNe-HJLr

Page Load Overview

0.55s
Total Load Time
95 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:255 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning41% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

education learning
41%
documentation technical
33%
adult content
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
1142.251.20.94Google · CDNUnited States
AS15169Google LLC
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
96--

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EC41ED3260F00937540382C526D5FB25FEC184479B191A82B6FC07968FB9E9E846F19D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:T4aNSNegFUL4fghnMVmDLPeM7Th0XYALNqVHlHZ:T4TFULYghrDrBiXBhqVFHZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2419:AAABAAAAAQAAAAQgRgADRIoAggAkEAAIAghAAAAABGABAIAEWoMAREACAAIARAgAiAgCAggC0AAAAgAAAAJAAAAIAoAABogA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e0fcfcfce4e4e0f0
Perceptual Hash:f3c8c86626999e66
Difference Hash:8490b0304c4c4820
Wavelet Hash:f0f8f8f8e0e0e0f0
Color Hash:#4abf40

Other Hashes

Crop Resistant:8490b0304c4c4820,31212374d4908020

Scan History

Scan history not available

Unable to load historical scan data