Security Report: check-mrjcc1wh.devwatchaudit.casa - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/38b4d71b-1c11-4fc4-9639-e1fd70184443 Domain and IP registration (RDAP)/api/v1/rdap/38b4d71b-1c11-4fc4-9639-e1fd70184443 Certificate Transparency/api/v1/ct/check-mrjcc1wh.devwatchaudit.casa How often this domain was scanned/api/v1/domain/stats/check-mrjcc1wh.devwatchaudit.casa Scan history for this domain/api/v1/domain/history/check-mrjcc1wh.devwatchaudit.casa?limit=15

This website contacted 4 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is check-mrjcc1wh.devwatchaudit.casa and was registered 2 weeks ago.

Submitted URL: https://check-mrjcc1wh.devwatchaudit.casa/?address=9Pfync3ejPC9eHqVzq3nYQJAhyhjqpnB9UsaSfLxpump

AI Security Verdict

High Risk

Confidence: 68%

Risk Score

Highly suspicious 16-day-old domain flagged for phishing, using a randomized token-address subdomain pattern typical of crypto scam links; endpoint is dead and serves no legitimate content.

Risk Factors (4)

Indicators of Compromise: phishing report against the primary domain (single-source community submission, not corroborated)

Very new domain (16 days) with zero reputation and no ranking

Per-target randomized subdomain + token address query pattern typical of crypto phishing/drainer landing links

Endpoint already unresponsive, leaving no verifiable legitimate content

Domain age information unavailable

Details

Page Title

DEVWATCH — Analysis: 9Pfync3e...pumpsecondary capture

Scan Type

public

Domain Name Analysis

Within the .casa top-level domain, 'check-mrjcc1wh.devwatchaudit.casa' is registered and includes subdomain 'check-mrjcc1wh'. The registrable portion 'devwatchaudit' spans 13 characters split between 5 vowels and 8 consonants. Segmentation suggests 3 words: dev, watch, audit. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.44s

Total Load Time

N/A

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:795 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software75% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

75%

documentation technical

47%

adult content

29%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	172.67.132.242Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	142.251.110.95Google · CDN	United States	AS15169Google LLC
0	104.21.5.42Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	4	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DCE2E6B29214A039F037D4C2B6C467EF70A49407EC2746ACEAD4925DCACBEF75A30758

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:RsVJ4EVuRIhnATIeee24ollu7pAVJnoLvwIAlq8e:CVuRfeq8e

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:33362:GUQcLAIinIgGAHzcMEEtcRIG+IDACgGF0DJMkBTETsISIlQMYEKBAcGAIVILUkIMgThUhIAahSLIecIUUEiRyEH5uGACWgIk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff

Perceptual Hash:870707070f0f1f3f

Difference Hash:8000000000000000

Wavelet Hash:70f0f0f0f0f0f0f0

Color Hash:#53ac6f

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: check-mrjcc1wh.devwatchaudit.casa