Security Scan Report: usenebula.click

Submitted: Completed: publiccompleted
This website contacted 9 IPs in 3 countries across 8 domains to perform 26 HTTP transactions. The main domain is usenebula.click and was registered 1 month ago.

Submitted URL: https://usenebula.click/

AI Security Verdict

Low Risk

Confidence: 70%

3
Risk Score

Developer-facing video embed API with no credential or payment forms, no impersonation and no threat-intel hits. Only weak priors (33-day-old domain, unranked). Legal status of the aggregated third-party streams is unclear.

Risk Factors (2)
Domain registered 33 days ago (very new, no established reputation)
The page describes itself as a 'video aggregation service' that links third-party publicly available stream sources without hosting them, which raises copyright/licensing legality questions
Safety Factors (5)
Self-branding only — no brand impersonation detected
No credential, login or payment collection anywhere on the page
No Indicators of Compromise, no malicious JavaScript, no network IDS alerts
No cross-origin credential form submissions and no credential exfiltration
All JavaScript served from the site's own domain except a well-known analytics host
Domain age information unavailable

Details

Page Title

UseNebula - Reliable Media Playback API

Scan Type

public

Domain Name Analysis

You're looking at domain 'usenebula.click' on the .click top-level domain. The second-level label 'usenebula' is 9 characters long split between five vowels and 4 consonants. Breaking it apart gives 2 words: use, nebula. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://usenebula.click/

Page Load Overview

1.56s
Total Load Time
2.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,208 chars
Detector Agreement:75%

Website Classification

Primary Category

entertainment media49% confidence
Type: static
Method: ml+structural

All Detected Categories

entertainment media
49%
documentation technical
41%
technology software
27%
news media journalism
26%
phishing/scam
20%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10172.67.199.224Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.82.94Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.35.26Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2138.199.37.229Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
2142.251.20.97Google · CDNUnited States
AS15169Google LLC
2172.241.53.94Netherlands
AS7979Servers.com, Inc.
2172.67.212.71Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
269--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15692D8B1B0F0613E2823D9D9769937CE3195F017D81B0240F89E8AB58FCBDA3A877556

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:AnN/uEx501nM0k1hHY43TgxUErPhURKStX/EKX2V:AxuEx509KhHY43TCUEIKStX/D2V

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20352:gokxALMBSoC4EIrioQGkNqAxDYEUCoiKk4DIECjSYIkAAAoIjAk5YYFRmIJAVrJqKSGU8y2AGAYHIwA2BsQgcSAfgkNDSC1A

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0119390125013d3d
Perceptual Hash:8acd9721336379c3
Difference Hash:cd33314d6d336969
Wavelet Hash:67193d013d193d3d
Color Hash:#93881f

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data