Security Scan Report: nonostarrecords.com

Site favicon
Submitted: Sep 15, 2026, 3:47:42 AMCompleted: Sep 15, 2026, 3:48:17 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Legitimate record-label domain appears compromised: it loads a multi-source-flagged ClearFake exploit-kit resource and triggers critical EtherHiding malware IDS alerts. Do not interact.

Risk Factors
Content-malware threat-intel match (ClearFake) on the primary domain
Third-party exploit-kit domain (clearfake-1) loaded by the page
Critical IDS EtherHiding exfiltration alerts
Blockchain RPC connection consistent with EtherHiding payload delivery
Domain age information unavailable

Details

Page Title

Nonostar Records – Independent record label

Scan Type

public

Domain Name Analysis

You're looking at domain 'nonostarrecords.com' on the commercial generic top-level domain (.com) with no subdomain. Count 15 characters in 'nonostarrecords' with five vowels and 10 consonants. Tokenizing the label suggests three words: nono, star, records. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nonostarrecords.com

Page Load Overview

8.98s
Total Load Time
9.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:36%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:1,250 chars
Detector Agreement:67%
Language mismatch: Declared as de but detected as en

Website Classification

Primary Category

entertainment media80% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

entertainment media
80%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16142.251.110.95Google · CDNUnited States
AS15169Google LLC
1381.169.145.74Germany
AS6724Strato GmbH
13104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13142.251.110.94Google · CDNUnited States
AS15169Google LLC
13172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13104.21.6.137Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13142.251.127.94Google · CDNUnited States
AS15169Google LLC
1078--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A942B637B56DAD1A529133D5B03F360DC237102BDBD88AE4D9AB012A16F5BDE9013EC9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:IWYK+vbvjXYoZ0WZHo63RXZEPHUxC0a3+opzPMqnW68Bb1cpbeXBPNvPO1n9E+wq:zzmrjooZ0WDX6880a3RPM4OgOGCTXfW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12558:EoPoBIJYDYqJAYAgA5IICEInhBBABZQCEIAKhMHXUfLBHQFRIGEFAVCIAmbjDhZgCVEMdRI0iCQGEQgEuzo0AgIAQAYkEBSF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8108081818090101
Perceptual Hash:99d66699cc66338c
Difference Hash:6d9b7b33b353492d
Wavelet Hash:dfc93d1d19190921
Color Hash:#40bf4a

Scan History

Scan history not available

Unable to load historical scan data