Security Report: roz3b4iqyrt6.wiestonunanasikasar.win - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/19ec73c5-57e2-42cc-a8b1-9a9150ff267d Domain and IP registration (RDAP)/api/v1/rdap/19ec73c5-57e2-42cc-a8b1-9a9150ff267dHow often this domain was scanned/api/v1/domain/stats/roz3b4iqyrt6.wiestonunanasikasar.win Scan history for this domain/api/v1/domain/history/roz3b4iqyrt6.wiestonunanasikasar.win?limit=15

This website contacted 23 IPs in 2 countries across 17 domains to perform 20 HTTP transactions. The main domain is wiestonunanasikasar.win and was registered 1 month ago.

Submitted URL: https://roz3b4iqyrt6.wiestonunanasikasar.win

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Domain is flagged as Hades malware infrastructure by two independent threat feeds; it currently serves only a Cloudflare Tunnel error. Treat as malicious and avoid visiting.

Risk Factors (4)

Multi-source corroborated threat-intelligence match identifying the primary domain as Hades malware infrastructure

Dynamically generated, non-descriptive subdomain name on a throwaway-style .win domain

Cloudflare Tunnel fronting hides the actual origin host from inspection

No verifiable ownership, content, or reputation for the domain

Domain age information unavailable

Details

Page Title

Cloudflare Tunnel error | roz3b4iqyrt6.wiestonunanasikasar.win | Cloudflare

Scan Type

public

Domain Name Analysis

The domain name 'roz3b4iqyrt6.wiestonunanasikasar.win' uses the .win top-level domain and includes subdomain 'roz3b4iqyrt6'. Its registrable label 'wiestonunanasikasar' stretches across 19 characters containing nine vowels alongside ten consonants. Breaking it apart gives 7 words: wiest, on, un, an, a, sika, sar. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.90s

Total Load Time

1.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:864 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software39% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

39%

documentation technical

38%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
20	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.18.31.78Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	151.101.1.229Fastly · CDN	United States	AS54113Fastly, Inc.
0	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	185.111.111.157	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
0	172.66.0.102Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.18.39.62Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	35.190.26.57Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
0	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.18.30.78Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
20	23	-	-