Security Scan Report: edge.kernelmonitor.cc

Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 11 HTTP transactions. The main domain is kernelmonitor.cc and was registered 3 months ago.

Submitted URL: https://edge.kernelmonitor.cc

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Primary domain is corroborated by two independent threat feeds as 'acr stealer' malware; a Cloudflare challenge hides the real page, so content cannot be verified as safe. Treat as malware distribution.

Risk Factors (6)
Multi-source corroborated threat-intel match for 'acr stealer' on the primary domain
Malware-family reputation on the exact host serving the page
Heavy eval() usage (91 calls) indicating runtime code generation/obfuscation
Recently registered domain (77 days) with no ranking/reputation
Circular redirect observed in the redirect chain
.cc TLD alert flagged by network IDS
Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Domain Name Analysis

Within the .cc country-code top-level domain, 'edge.kernelmonitor.cc' is registered, featuring subdomain 'edge'. Its registrable label 'kernelmonitor' stretches across 13 characters containing five vowels alongside 8 consonants. It segments into 2 words: kernel, monitor. Expect 6.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://edge.kernelmonitor.cc

Page Load Overview

2.83s
Total Load Time
715 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:396 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software72% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
72%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5104.21.17.58Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.222.195Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
114--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T137C13AE38C26401317F607F36C7B3284A331F6189B086185D6A1E19D95DDF6BC5AD2E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:PNyHGvmXZzIEb0EpubyW87STV9lblR8kP+Qwwuyc88MGLSMsKg81rNDeJYYzueh4:PNa2axUyBEV9lblPGQdcJjLS1v81rReo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6071:lhg0iILAoMcqhDSiBAeC0wIBAAAAVEAoFCQqAhGENugAIAADGFAugBAYABkAQIkEQABcRCAAiSQxSAAFoEGHBQgpRUkOBgcF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc7c7ffffffffe7
Perceptual Hash:b03932cfc6ccc6cc
Difference Hash:181e1c100000000c
Wavelet Hash:fcc0c0f83c3c3c00
Color Hash:#73862d

Other Hashes

Crop Resistant:181e1c100000000c

Scan History

Scan history not available

Unable to load historical scan data