Security Scan Report: dobeqnesmot.cc

Submitted: Completed: publiccompleted
This website contacted 22 IPs in 3 countries across 20 domains to perform 23 HTTP transactions. The main domain is dobeqnesmot.cc and was registered 1 month ago.

Submitted URL: https://dobeqnesmot.cc

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

Dead Cloudflare tunnel page on a 59-day-old .cc domain that a single unverified feed labels as malware. No forms or scripts observed, but the unresolved host and flagged reputation warrant avoidance.

Risk Factors (4)
Indicators of Compromise: primary domain flagged as a malware family in threat intelligence (single-source, uncorroborated)
Recently registered domain (59 days) with no established reputation
Dead Cloudflare Tunnel endpoint on a young .cc domain — consistent with short-lived/throwaway infrastructure
Network IDS alert for .cc TLD DNS query (generic, low specificity)
Domain age information unavailable

Details

Page Title

Cloudflare Tunnel error | dobeqnesmot.cc | Cloudflare

Scan Type

public

Domain Name Analysis

You're looking at domain 'dobeqnesmot.cc' on the .cc country-code top-level domain with no subdomain. Its registrable label 'dobeqnesmot' stretches across 11 characters holding 4 vowels versus 7 consonants. Word splitting yields 5 words: do, be, q, nes, mot. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dobeqnesmot.cc

Page Load Overview

0.84s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:798 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical41% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
41%
technology software
37%
cryptocurrency blockchain
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.30.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.231.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1103.21.244.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.31.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1108.138.7.129Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1146.75.121.194Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
12.16.183.17Akamai · CDNHamburg, Free and Hanseatic City of Hamburg, Germany
AS20940Akamai International B.V.
134.111.241.208Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2322--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DB128573F1F555290043C36675BDBB2D7926A01B9BB108D57E5E42725F8EF83E812388

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:lUa/Paawl24zAzPV7CPZG9onM3CeNwgzCJampBSz1RJAPshs5xYsNsQ:aa/il2ZVK8onM3CeCUyF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9357:OUAIxEQAKi7kRZRggiFmFEE41QEITGcA0N0IIAiNKQdMBNiXHgIcAQLNCgRhgP1IgJAkAYgAKHKAUMgJQFR0psIuEQRByCiC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7cfcfcfcfe7ffff
Perceptual Hash:b838c7671838e793
Difference Hash:143c1830180c1400
Wavelet Hash:838b878f87c30f0f
Color Hash:#d22d9b

Other Hashes

Crop Resistant:143c1830180c1400

Scan History

Scan history not available

Unable to load historical scan data