Security Scan Report: mail.novaform.cc

Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 8 HTTP transactions. The main domain is novaform.cc and was registered 1 month ago.

Submitted URL: https://mail.novaform.cc

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

mail.novaform.cc is an 8-day-old domain flagged by two independent threat feeds and multiple CRITICAL IDS alerts as an ACR Stealer (infostealer) host; treat as active malware infrastructure and avoid.

Risk Factors (5)
Host domain is a known ACR Stealer malware domain from two independent threat-intel feeds
CRITICAL IDS alerts for malware DNS query and TLS SNI to the ACR Stealer domain
Domain is only 8 days old (VERY_NEW, 2.0x risk multiplier)
Unranked / no reputation in Cisco Umbrella top 1M
Cloudflare bot-protection wall prevents inspection of real page content, so the page could not be verified as benign
Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Domain Name Analysis

You're looking at domain 'mail.novaform.cc' on the .cc country-code top-level domain, featuring subdomain 'mail'. The registrable portion 'novaform' spans 8 characters containing three vowels alongside 5 consonants. Tokenizing the label suggests two words: nova, form. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mail.novaform.cc

Page Load Overview

6.37s
Total Load Time
239 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:386 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software75% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
75%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
84--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C3C18DF3AA658127D7B22FA64C7F73581320B5884B0892C9D1A1C95F4FCAF8F414978E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:PNyuGvmXZzIEb0EpCW87SaIi/u8CFdTdm7cwgtkzmptoZkchMbu7Yzueh8kmw:PNP2axCBtIi/u8CFl6cwUkzm0kzbuUyS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6066:iggRKAoI4JYGhBUgDATA0wiKEmIKMGGRVQECSBGGAuAAEFACDVUDAoAACQgAQmgMQAAMQSEBnbURA0AEEUAXCQgpQRgIFkcR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc3c7ffffffffe7
Perceptual Hash:b03832cec6cec6ce
Difference Hash:101e1c100000000c
Wavelet Hash:3c00043c0f0f3f03
Color Hash:#e06c98

Other Hashes

Crop Resistant:101e1c100000000c

Scan History

Scan history not available

Unable to load historical scan data