Security Scan Report: _wildcard_.doxycyclinedx.com

Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 1 domain to perform 11 HTTP transactions. The main domain is doxycyclinedx.com and was registered 1 month ago.

Submitted URL: https://_wildcard_.doxycyclinedx.com/zoom/index.php

AI Security Verdict

Low Risk

Confidence: 68%

3
Risk Score

Two-day-old, unranked domain with a drug-themed name and '/zoom/index.php' path, hiding its real page behind a Cloudflare bot wall. No confirmed IoC/YARA hit, but the profile is too risky to trust.

Risk Factors (5)
Domain age 2 days (CRITICAL risk category, 3x risk multiplier)
No Cisco Umbrella ranking / zero established reputation
Capture blocked by bot-protection wall — real content and any credential harvesting are hidden from verification
Suspicious drug-themed domain name combined with a '/zoom/index.php' script path
High count of eval() dynamic code execution in loaded JavaScript
Safety Factors (5)
No Indicators of Compromise matched against the page or its resources
No JavaScript YARA malware patterns detected
No known malicious kit identified in the kit roster
No network-level IDS alerts (Suricata) for this session
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 7 to 3
Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), '_wildcard_.doxycyclinedx.com' is registered and includes subdomain '_wildcard_'. The core label 'doxycyclinedx' covers 13 characters holding 3 vowels versus ten consonants. Segmentation suggests 5 words: do, xy, cyclin, ed, x. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://_wildcard_.doxycyclinedx.com/zoom/index.php

Page Load Overview

0.44s
Total Load Time
669 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:410 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software79% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
79%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
114--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10AD16CE79B44810747B957E1D07AB39481209799E70761E0F3A1C61DE6DEF6F804EACC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:PNyNGvmXZzIEb0EpsW87SXLBKMWw/zcLou6W0EP5S3f9tG+AhYzueh83Jmw:PNM2axsBCHWw/oLxRDSvdA2yZsw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6163:gAgUGIMhhMZsjRQwDwTAUyCBKAgAUAIAHDQDERGNAKARgiAAEFIKMQAJJAiJQAwkIAqNQPATCQIRCCAGAwK1Sxg54RoIhsdg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c3cfffffffffe7
Perceptual Hash:b03032c6c7cdcdcd
Difference Hash:0c9e12100000000c
Wavelet Hash:f8c0c0f0f0f0fcc0
Color Hash:#2d866d

Other Hashes

Crop Resistant:0c9e12100000000c

Scan History

Scan history not available

Unable to load historical scan data