ScanMalware.com

Security Scan Report: sso.meshblueprint.cc

Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7c8bfd81-49ba-4baa-959a-0c2d29086832Domain and IP registration (RDAP)/api/v1/rdap/7c8bfd81-49ba-4baa-959a-0c2d29086832How often this domain was scanned/api/v1/domain/stats/sso.meshblueprint.ccScan history for this domain/api/v1/domain/history/sso.meshblueprint.cc?limit=15
This website contacted 4 IPs in 1 country across 2 domains to perform 9 HTTP transactions. The main domain is meshblueprint.cc and was registered 3 months ago.

Submitted URL: https://sso.meshblueprint.cc

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Primary domain sso.meshblueprint.cc is multi-source reported as 'acr stealer' malware, on a 53-day-old unranked .cc host gated behind a Cloudflare challenge. Treat as HIGH_RISK; do not submit credentials.

Risk Factors (5)
Multi-source corroborated threat-intel match: acr stealer malware attributed to the primary scanned domain
Hostname 'sso.' on a domain flagged as a stealer, indicative of login/credential-capture infrastructure
Very new domain (53 days) with no established reputation
High-severity IDS alerts for .cc TLD DNS traffic
High-volume eval() usage (91 occurrences) on a page whose true content is hidden behind a bot challenge
Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Domain Name Analysis

Within the .cc country-code top-level domain, 'sso.meshblueprint.cc' is registered with subdomain 'sso'. Its registrable label 'meshblueprint' stretches across 13 characters holding 4 vowels versus 9 consonants. Tokenizing the label suggests 2 words: mesh, blueprint. The median word length lands at 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sso.meshblueprint.cc

Page Load Overview

4.68s
Total Load Time
248 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:394 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software73% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
73%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3172.67.194.141Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.84.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
94--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E2C14CF391A5801387F92FA2957A33A48339A189AB0571C9F2E2D44D5BCEF4B95491CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:PNy3GvmXZzIEb0Ep5W87SX9lCiK+CHqd07hlcboVy9duQlgKesW7I4KYzueh80C2:PNq2ax5Bs9i1qm7hlUoV0QjKeBXyvw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6092:gAgYCJ5ikIdBjjQgRA6CUwJAgCAAEEBkHABmgRWgCLAAooIAglFSQCBIEAqAwAwEEARMQCCAOUAREAw8hCAFAThpRQgcBi8A

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc7c7ffffffffe7
Perceptual Hash:b03932cfc6ccc6cc
Difference Hash:181e1c100000000c
Wavelet Hash:3f03071f0f0f3f03
Color Hash:#911f93

Other Hashes

Crop Resistant:181e1c100000000c

Scan History

Scan history not available

Unable to load historical scan data