ScanMalware.com

Security Scan Report: _wildcard_.freouaoniondocuindustrials.com

Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3a30d9e7-5321-48f3-8545-7a253288459bDomain and IP registration (RDAP)/api/v1/rdap/3a30d9e7-5321-48f3-8545-7a253288459bHow often this domain was scanned/api/v1/domain/stats/_wildcard_.freouaoniondocuindustrials.comScan history for this domain/api/v1/domain/history/_wildcard_.freouaoniondocuindustrials.com?limit=15
This website contacted 4 IPs in 1 country across 1 domain to perform 10 HTTP transactions. The main domain is freouaoniondocuindustrials.com and was registered 1 month ago.

Submitted URL: https://_wildcard_.freouaoniondocuindustrials.com/z/zvhfdrw3hjstu/index.php

AI Security Verdict

Moderate Risk

Confidence: 55%

5
Risk Score

Content is hidden behind a Cloudflare challenge, so the real page is unverified. Suspicious wildcard/randomised host and path on a 47-day-old unranked domain, but no Indicators of Compromise or malware hits - moderate risk, do not submit data.

Risk Factors (3)
Real page content is hidden behind a bot-protection challenge, blocking verification and hiding any credential or payment collection
Wildcard/high-entropy hostname plus randomised path segment on a newly registered domain, consistent with throwaway attack infrastructure
Domain registered 47 days ago and absent from Cisco Umbrella rankings - weak priors that add no independent weight but are consistent with the URL-structure anomaly
Safety Factors (5)
No Indicators of Compromise matched the page or its loaded resources
No JavaScript malware (YARA) patterns or high-precision native-YARA hits
No network IDS (Suricata) phishing or malware alerts
No known malicious kit identified in the analyst-vetted kit roster
No cross-origin JavaScript network targets and no observed credential exfiltration
Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Domain Name Analysis

The domain name '_wildcard_.freouaoniondocuindustrials.com' uses the commercial generic top-level domain (.com) with subdomain '_wildcard_'. The core label 'freouaoniondocuindustrials' covers 26 characters holding 13 vowels versus 13 consonants. Breaking it apart gives 8 words: f, re, ou, a, onion, do, cu, industrials. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://_wildcard_.freouaoniondocuindustrials.com/z/zvhfdrw3hjstu/index.php

Page Load Overview

0.73s
Total Load Time
1003 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:436 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software78% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
78%
documentation technical
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.67.145.247Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.55.81Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
104--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19CD2F972EB08225B653747EF7AC0FB84113062A19616637AF8E735648FC915A3A333C7

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:dxoFoWGzWe5P1i2ene4qrWZaTRAaZHINSFEa8pBfeqGlv+sZY3x:UmRDqjyWZatAaZHINSFQT2qGlBCx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:29083:GKXEWQEyIiLkGdCCAcgmQKzABCkIK1iYAGACaWAiG8LAQhyQRkCGlGxsAJiwEFADT4RMj1gdMDlIi4sGZE9AzCOgCAO4SQBI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e3c3cfdfffffffe7
Perceptual Hash:b03864cec7cb939a
Difference Hash:069e1a100000000c
Wavelet Hash:fcc0c0cc3c3c3c00
Color Hash:#99ac53

Other Hashes

Crop Resistant:069e1a100000000c

Scan History

Scan history not available

Unable to load historical scan data