ScanMalware.com

Security Scan Report: notube.net

Submitted: Oct 31, 2025, 8:54:08 AMCompleted: Oct 31, 2025, 8:54:35 AMpubliccompleted
Loading additional data...

Summary

This website contacted 15 IPs in 2 countries across 6 domains to perform 32 HTTP transactions. The main domain is notube.net and was registered NaN years ago.

Submitted URL: https://notube.net/en/youtube-app-262

AI Security Verdict

Low Risk

Confidence: 55%

2
Risk Score

Legitimate site with low risk; brand names are used for marketing, not credential harvesting.

Risk Factors
Brand impersonation (displaying Twitter, TikTok, YouTube branding on an unrelated domain)
Safety Factors
Domain age > 7 years (well‑established)
No password or payment collection forms
No known malicious Indicators of Compromise
Domain age information unavailable

Details

Page Title

Converter: YouTube MP3, Tiktok MP4 and more! - noTube

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

entertainment media

(44%)

Domain Information

The domain name 'notube.net' uses the network infrastructure generic top-level domain (.net). The second-level label 'notube' is 6 characters long split between 3 vowels and three consonants. Word splitting yields 2 words: no, tube. Median word length is 3 characters. Most frequently, 'no' shows up in Catalan. It also appears in Spanish and Italian contexts.

Screenshot

Security scan screenshot of https://notube.net/en/youtube-app-262

Page Load Overview

5.96s
Total Load Time
32
HTTP Requests
6
Domains
159 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:3,491 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media44% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
44%
technology software
29%
corporate
25%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.67.71.175United States
AS13335CLOUDFLARENET
2104.26.12.161United States
AS13335CLOUDFLARENET
2104.26.13.161United States
AS13335CLOUDFLARENET
2104.26.10.188United States
AS13335CLOUDFLARENET
2208.115.216.114Chicago, Illinois, United States
AS46475LIMESTONENETWORKS
2142.250.185.195United States
AS15169GOOGLE
22606:4700:20::ac43:47afUnited States
AS13335CLOUDFLARENET
22606:4700:20::ac43:4696United States
AS13335CLOUDFLARENET
22606:4700:20::681a:da1United States
AS13335CLOUDFLARENET
22606:4700:20::681a:bbcUnited States
AS13335CLOUDFLARENET
3215--

Detected Technologies6

Open-Graph-Protocolvwebsite
100%
JQueryv3.7.1
100%
HTTP/3
40%
HSTS
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18D735D374225283F9137C3D574E13759B97F802BE68686A5B37E0961CFC2EE99923209

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:lqQVjRtDvU34pQFMGRme2g4T/0/HOSJA7+qogn5nwW642aY7pC:+O06oZW642aYtC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:73925:ICgEa0uhIIwIAAhYPEkQIUbJDckQggFglR9BDIEBG3DxiYaDOUllApi5qAcKNmBWQAjjgaPBZQVQGlaWSkkIAIIAMGmCIFYM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000380001ffff
Perceptual Hash:ca4fb0304fcf1bb0
Difference Hash:d52161711df1008d
Wavelet Hash:0001183901ffffff
Color Hash:#4084bf

Other Hashes

Crop Resistant:d52161711df1008d,c6008262628200c8,d245323960711d21,014416d0d4064101

Scan History

Scan history not available

Unable to load historical scan data