Security Scan Report: gorsefield.cc

Redirected to:
https://apnews.com/
Bot Protection Detected

This website is protected by Cloudflare bot protection. The screenshot and page details below show the page as it was captured.

Submitted: Completed: publiccompleted
This website contacted 68 IPs in 3 countries across 3 domains to perform 11 HTTP transactions. The main domain is gorsefield.cc and was registered 2 weeks ago.

Submitted URL: https://gorsefield.cc

Effective URL:
https://apnews.com/
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

The scanned host gorsefield.cc is flagged by two independent feeds as an 'acr stealer' malware domain and redirects to apnews.com; the clean news content is not served by the flagged host, so treat the entry domain as malicious.

Risk Factors (3)
Content-malware indicator of compromise (acr stealer) on the scanned domain, corroborated by 2 independent threat-intel feeds
Cross-domain redirect from a malware-flagged host to an unrelated legitimate news site (cloaking/redirector behaviour)
HIGH-severity network IDS alert for .cc TLD DNS traffic
Domain age information unavailable

Details

Page Title

Associated Press News: Breaking News, Latest Headlines and Videos | AP Newsother network

Scan Type

public

Domain Name Analysis

The domain name 'gorsefield.cc' uses the .cc country-code top-level domain and has no subdomain. The second-level label 'gorsefield' is 10 characters long split between 4 vowels and six consonants. Tokenizing the label suggests 2 words: gorse, field. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://gorsefield.cc

Page Load Overview

2.61s
Total Load Time
993 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:374 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
77%
news media journalism
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11104.16.23.8Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.18.11.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.18.86.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.16.22.8Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0192.0.66.159San Francisco, California, United States
AS2635Automattic, Inc
0108.138.7.122Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
018.66.112.95Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
0104.18.35.13Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.16.160.145Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1168--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18EC51A2098F2252A02DE73E1665067E85B53972BDA852BE0B1CCB66F1F41FC5AF13D4C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:Tj/f88wK8LIwjBcjvhM8OyaVjE6ym8C1M4/clynhfE6ym8C1M4/bsqCEaNufuU5b:Tj/f2IwjY1WcRWYIOrO0O

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2508826:GKsBTGxQ0QwYJICQiBSAHIMCoIXNEhY1BlTMgNDmWgAmgKCoARiAStgBKACQACYG4ABAkHIAwDAHA9nZoCK5YMkAKBG5ITgC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00bd3d393d014109
Perceptual Hash:cb9c34764f613456
Difference Hash:b17171736b4f0f6b
Wavelet Hash:00bfffb9bd81c101
Color Hash:#862d5b

Scan History

Scan history not available

Unable to load historical scan data