ScanMalware.com

Security Scan Report: drive-docs.buzz

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/201149b0-ea67-4353-a7af-cd708060bd1eDomain and IP registration (RDAP)/api/v1/rdap/201149b0-ea67-4353-a7af-cd708060bd1eHow often this domain was scanned/api/v1/domain/stats/drive-docs.buzzScan history for this domain/api/v1/domain/history/drive-docs.buzz?limit=15
This website contacted 6 IPs in 1 country across 3 domains to perform 8 HTTP transactions. The main domain is drive-docs.buzz and was registered 2 days ago.

Submitted URL: https://drive-docs.buzz/areyouhuman?from=aHR0cHM6Ly9kcml2ZS1kb2NzLmJ1enov

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Day-old unranked .buzz site named to evoke Google Drive that serves only a 'Human verification' gate and a self-referential redirect — a phishing/cloaking pattern with the payload still hidden.

Risk Factors (4)
Hostname 'drive-docs' on drive-docs.buzz deceptively evokes Google Drive/Google Docs on a domain Google does not own
Domain registered less than a day ago and absent from all reputation rankings
Page serves only a bot-verification gate with no business content — typical cloaking/pre-landing pattern
Self-referential base64 redirect parameter (?from=...) consistent with traffic laundering
Domain age information unavailable

Details

Page Title

Human verification

Scan Type

public

Domain Name Analysis

The domain 'drive-docs.buzz' uses the .buzz top-level domain while skipping any subdomain. The registrable portion 'drive-docs' spans 10 characters holding three vowels versus six consonants; bonus characters include 1 hyphen. Splitting it apart reveals two words: drive, docs. Median word length comes out to 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://drive-docs.buzz/areyouhuman?from=aHR0cHM6Ly9kcml2ZS1kb2NzLmJ1enov

Page Load Overview

1.89s
Total Load Time
828 KB
Total Size

Language Analysis

Primary Language

🇰🇷Korean
Code: ko
Confidence:80%
Script:Hangul
Direction:ltr

Detection Details

HTML Lang Attribute:ko
Text Length:18 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.16.124.96Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.16.123.96Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
86--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12441374B84F30407771392785FA6E6096D13E10BCA8CD9A07D8E92559F8DBA4F8837D4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:f8L9Ugb8SnZpyJa2LRz/sKFARYCJUiL3CNSEJMN:8ygb8cTyJa2LRz/sK+RNUiL3OUN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2271:AAACABAAAAAQBIAAAACAAAAgAASAEASAAAAaUgBADAESAAAAAAAAAAQgCAAAAgAAABBBAAAAAAAAAAAgAAAJAAowABIAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffff
Perceptual Hash:e63199cc663399cc
Difference Hash:0000000c0c000000
Wavelet Hash:3c3c3c24243c3c3c
Color Hash:#79a4d2

Other Hashes

Crop Resistant:0000000c0c000000

Scan History

Scan history not available

Unable to load historical scan data