Security Scan Report: check-nqemo3qwa.devwatchstream.skin

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 1 country across 6 domains to perform 17 HTTP transactions. The main domain is devwatchstream.skin and was registered 1 month ago.

Submitted URL: https://check-nqemo3qwa.devwatchstream.skin/?address=ByXX1TWJRQXf4dLtvLWuGS6dxFbtGjozYLdKYdaEwjsg

AI Security Verdict

High Risk

Confidence: 74%

8
Risk Score

3-day-old .skin domain flagged for phishing hosts a fake Solana rug-checker that gates 'full access' behind a wallet connection — a classic crypto-drainer pattern. Do not connect your wallet.

Risk Factors (5)
Newly registered domain (3 days old) with no established history
Primary domain flagged for phishing by threat intelligence
Wallet-connection gate presented as a free 'rug probability' analysis tool
Unranked domain on a high-abuse TLD (.skin)
HIGH-severity IDS alert for .cc TLD DNS query
Domain age information unavailable

Details

Page Title

DEVWATCH — Analysis: ByXX1TWJ...wjsg

Scan Type

public

Domain Name Analysis

The domain 'check-nqemo3qwa.devwatchstream.skin' uses the .skin top-level domain and includes subdomain 'check-nqemo3qwa'. The registrable portion 'devwatchstream' spans 14 characters containing 4 vowels alongside ten consonants. Segmentation suggests 3 words: dev, watch, stream. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://check-nqemo3qwa.devwatchstream.skin/?address=ByXX1TWJRQXf4dLtvLWuGS6dxFbtGjozYLdKYdaEwjsg

Page Load Overview

1.38s
Total Load Time
417 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,932 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: static
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
2172.64.153.234Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.250.154.94Google · CDNUnited States
AS15169Google LLC
2172.64.151.87Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.250.154.95Google · CDNUnited States
AS15169Google LLC
177--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B4E2E5B29214603AF437D4C2B6C467EF70A49407EC2746ACEAD4965DCACBEF35A30758

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:0gvIFEVuRIhnATIeee24ollu7pAVJnoLvwIAlq8e:9VuRfeq8e

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:33368:EIgIIgAAGPk5bhIBhpigLxOchgZhABugDgIAAHMQDzCEjQAwISoMHwEBITokAghAmGATAMMEUSBwE0UAAHDyOcwUAgkhAD52

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff
Perceptual Hash:870707070f0f1f3f
Difference Hash:8000000000000000
Wavelet Hash:70f0f0f0f0f0f0f0
Color Hash:#98d279

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data