Security Scan Report: dcfpp.com

Redirected to:
https://www.wikipedia.org/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 2 domains to perform 7 HTTP transactions. The main domain is dcfpp.com and was registered 4 months ago.

Submitted URL: https://dcfpp.com/_wildcard_.coqtarwars.vu/64.js

Effective URL:
https://www.wikipedia.org/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Scanned URL on dcfpp.com is flagged as a malware download (single-source, unverified) with a deceptive JS payload path; it redirects to the genuine Wikipedia site. Treat the URL itself as unsafe despite the benign destination.

Risk Factors (3)
URL flagged as malware_download by URLhaus (content-malware threat type) on the scanned host
Deceptive URL structure with a hidden third-party domain fragment and JS payload path
Entry domain dcfpp.com is unranked in Cisco Umbrella despite its long registration history
Safety Factors (6)
Redirect terminates on the real, established www.wikipedia.org (Umbrella top 1M), so no brand impersonation occurs
No JavaScript malware patterns detected by hunting rule
No network IDS/Suricata alerts
No credential or payment forms; no cross-origin credential exfiltration detected
The threat-intel match is single-source and unverified
Established domain (9378 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Wikipedia

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'dcfpp.com' is registered and has no subdomain. Count 5 characters in 'dcfpp' split between zero vowels and 5 consonants. Segmentation suggests 3 words: d, cfp, p. Expect one character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dcfpp.com/_wildcard_.coqtarwars.vu/64.js

Page Load Overview

5.17s
Total Load Time
75 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,677 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content51% confidence
Type: static
Method: ml+structural

All Detected Categories

adult content
51%
education learning
32%
documentation technical
31%
news media journalism
30%
corporate
25%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.67.216.1Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3185.15.59.224United States
AS14907Wikimedia Foundation Inc.
72--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16CC30943B04151BF737713FE3AA06A2C91236173C6B3AB993715EE6AE6C3D669C12107

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:jDbjur7xvTkzvZ2TiPBynYKmFLQFfIfFFODKFqBimTXb7:j+7xvT2BynQN6imTXb7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:120456:AIYo8JDQpNFtIhi4gBAhaF8okRgGAIYeQEyAAAQb1JIYBBDImyBw1B8AZEIpwhneSStJAFDBAApEUEAhoUmm30Jw4MEgAsC+

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:efe7e7f7f73f1505
Perceptual Hash:b7f01fc88cc83366
Difference Hash:080c0c0404555575
Wavelet Hash:e6e6e6e6e61c8405
Color Hash:#761f93

Other Hashes

Crop Resistant:080c0c0404555575

Scan History

Scan history not available

Unable to load historical scan data