ScanMalware.com

Security Scan Report: www.babyyouknow.cc

Redirected to:
https://www.babyyouknow.cc/login
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/55d56888-fc07-4371-b0d3-a6e9dfc62757Domain and IP registration (RDAP)/api/v1/rdap/55d56888-fc07-4371-b0d3-a6e9dfc62757How often this domain was scanned/api/v1/domain/stats/babyyouknow.ccScan history for this domain/api/v1/domain/history/babyyouknow.cc?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 71 HTTP transactions. The main domain is babyyouknow.cc and was registered 1 week ago.

Submitted URL: https://www.babyyouknow.cc

Effective URL:
https://www.babyyouknow.cc/login
Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

5
Risk Score

3-day-old, unranked domain collecting username/password with HIGH IDS alerts (Spamhaus DROP, root attack-response) and encoded inline scripts. No exfiltration or brand impersonation seen, but do not enter credentials.

Risk Factors (5)
Domain registered 3 days ago (CRITICAL age band) while soliciting a password login
No domain reputation whatsoever (unranked in Cisco Umbrella top 1M)
HIGH IDS alerts: Spamhaus DROP-listed traffic inbound and 'id check returned root' attack-response signatures
Encoded/decoded strings in inline JavaScript on a page whose only function is credential collection
No verifiable corporate identity, contact information, or registration details behind 'Bob Research Labs'
Safety Factors (6)
Form action is same-origin — no cross-origin credential submission detected
No credential exfiltration observed from page JavaScript (0 cross-origin network targets)
No JavaScript hunting rule malware patterns, no kit-roster match, and no threat-intelligence matches against the page or its resources
All scripts are served from the site's own domain; no third-party script hosts
Page displays its own product name ('Bob Research Labs') rather than impersonating a well-known brand
The only risk signals are a newly registered domain and the site's own login form, which posts to the same site. No impersonation of another brand, no threat-intelligence match and no credential exfiltration were found; adjusted from 7 to 5
Domain age information unavailable

Details

Page Title

Bob Research Labs: We're coming to root your server!

Scan Type

public

Domain Name Analysis

Within the .cc country-code top-level domain, 'www.babyyouknow.cc' is registered and includes subdomain 'www'. The core label 'babyyouknow' covers 11 characters with 4 vowels and seven consonants. Breaking it apart gives three words: baby, you, know. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Bxog C BosBpaujeHvem. BBeguTe Naponb, YTO6bI NDOAOMKUTb pa6ory c Bob Research Labs. Wms nonbsoparena bob Maponb -AMTe Naponb Yenosna vcnonbsoBahus — 9 npouvran(a) “ npKHMMato

Page Load Overview

11.53s
Total Load Time
4.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:213 chars
Detector Agreement:33%

Website Classification

Primary Category

government public service51% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
51%
technology software
44%
news media journalism
33%
adult content
33%
phishing scam
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7131.57.184.230Chicago, Illinois, United States
AS197769VPS Dedicated LLC
711--

Detected Technologies1

Nginxv1.22.1
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F95400616549E4BD8103FC0FD9387E2A7CAA40BE3F9B72692578BC6E70E30348739655

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:Sfedvpv9mL1p7rNbQl14l7QZfx+KdAHRdKb4ERNQ7SjP:I5rNkl14yZfx+KdAHfKb4ERNQ7SjP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:281844:NPkGRGSwxOiDgFgl0XERFjICVUgAAYDsCNjYhUCXg4A4qhggTgIkYx1jNEAQAAp1AJhpPLQIICByCYjIYKkRBgGRQAJhAgRg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f1f1f1f1f1f1f1f
Perceptual Hash:8c92936df2936d92
Difference Hash:7470767677777076
Wavelet Hash:1f1f1b1313111f1f
Color Hash:N/A

Other Hashes

Crop Resistant:00000c0c160e0004,0000083030080000

Scan History

Scan history not available

Unable to load historical scan data