Security Scan: Surveillance

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/335c5c73-c2ed-4612-b111-134f1e5b4d04 Domain and IP registration (RDAP)/api/v1/rdap/335c5c73-c2ed-4612-b111-134f1e5b4d04How often this domain was scanned/api/v1/domain/stats/noverabaal.com Scan history for this domain/api/v1/domain/history/noverabaal.com?limit=15

This website contacted 8 IPs in 3 countries across 5 domains to perform 343 HTTP transactions. The main domain is noverabaal.com and was registered 1 week ago.

Submitted URL: http://noverabaal.com/

Effective URL:

https://noverabaal.top/#/home?guard_source=bm92ZXJhYmFhbC5jb20

Redirected

AI Security Verdict

Low Risk

Confidence: 65%

Risk Score

Newly registered domain hop (.com -> .top) serving a cloaked route-selection gateway with crypto 'grow wealth' investment bait and hostile-TLD IDS alerts; no forms or IoC, but the funnel pattern is consistent with an investment/gambling scam. Avoid.

Risk Factors (5)

Cross-domain redirect from noverabaal.com to noverabaal.top with cloaking/guard_source parameter

Route/line-selection gateway page with instructions not to close the window, a common evasion pattern for restricted gambling/crypto funnels

Cryptocurrency 'get rich' investment teaser with no identifiable business, team or regulatory disclosure

Network IDS flags the .top domain as likely hostile (ET DNS/HTTP *.top alerts)

Anti-bot / cloaking behaviour: datacenter scanner and residential client were served different content

Safety Factors (6)

No credential, password or payment form found on the page (0 forms, 0 password fields, 0 payment fields)

No threat-intelligence Indicators of Compromise matched against the page or its resources

No JavaScript malware (YARA) patterns and no high-precision native-YARA hits

No cross-origin credential exfiltration and no third-party script hosts

No impersonation of a known brand detected in the served content

No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 3

Domain age information unavailable

Details

Page Title

Surveillance

Scan Type

public

Favicon Hash

MMH3: 1858887893

MD5: e70b47fb980988b1bed28fbb6af277ce

Domain Name Analysis

Domain 'noverabaal.com' uses the commercial generic top-level domain (.com) with no subdomain. Count 10 characters in 'noverabaal' with 5 vowels and five consonants. Word splitting yields 4 words: n, over, a, baal. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.24s

Total Load Time

4.0 MB

Total Size

Language Analysis

Primary Language

🇨🇳Chinese

Code: zh

Confidence:60%

Script:Han

Direction:ltr

Detection Details

Text Length:1,492 chars

Detector Agreement:50%

Website Classification

Primary Category

cryptocurrency blockchain96% confidence

Type: static

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

96%

documentation technical

72%

finance banking

68%

technology software

42%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
49	104.21.38.18Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
42	124.174.94.139	China	AS137718Beijing Volcano Engine Technology Co., Ltd.
42	142.250.154.95Google · CDN	United States	AS15169Google LLC
42	172.67.218.4Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
42	142.251.14.95Google · CDN	United States	AS15169Google LLC
42	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
42	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
42	47.83.165.14	Hong Kong, Hong Kong	AS45102Alibaba (US) Technology Co., Ltd.
343	8	-	-