Security Scan Report: stream.fernstead.cc

Bot Protection Detected

This website is protected by Cloudflare bot protection. The screenshot and page details below show the page as it was captured.

Submitted: Sep 14, 2026, 12:47:44 AMCompleted: Sep 14, 2026, 12:48:19 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Primary domain stream.fernstead.cc is flagged by two independent feeds as an 'acr stealer' malware host. With a 23-day-old unranked domain, circular redirect and HIGH IDS alerts, treat as malicious — do not visit or download anything.

Risk Factors
Multi-source corroborated malware Indicator of Compromise ('acr stealer') on the primary domain
Domain registered 23 days ago — very new, high-risk age bracket
Unranked / no domain reputation in Cisco Umbrella top 1M
Circular redirect chain
HIGH-severity network IDS alerts associated with the .cc TLD
Real page content unverifiable — capture was gated behind a Cloudflare bot-protection challenge
Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Domain Name Analysis

The domain 'stream.fernstead.cc' uses the .cc country-code top-level domain and includes subdomain 'stream'. Its registrable label 'fernstead' stretches across 9 characters split between 3 vowels and 6 consonants. Word splitting yields two words: fern, stead. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://stream.fernstead.cc

Page Load Overview

12.92s
Total Load Time
244 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:392 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software75% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
75%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3172.67.139.111Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.8.121Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
94--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E0C12AB74E250013C3A64BA2A4FAB394A761F2106B0511D4F2A2D44D95CCFBFD09AAAD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:PNyxGvmXZzIEb0EpvW87SH65gKdbQHunrK9N6kvyh99TcQCRVeGCJ1ENUEYzueh7:PNc2axvBXV6urKDvyr9TVCRVeGcOONya

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6091:gAqQHIKkgpbAhBQixAWAUwDAgAAEGwWMNAAGMBmKoKgOHGhAAHACAEgAowiI4AgMEEEMQCCAiYARgCsUWwQnIQkpxYgJFgcA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc7c7ffffffffe7
Perceptual Hash:b03932cfc6ccc6cc
Difference Hash:181e1c100000000c
Wavelet Hash:3c000038fcfcfcc0
Color Hash:#2d8643

Other Hashes

Crop Resistant:181e1c100000000c

Scan History

Scan history not available

Unable to load historical scan data