Security Scan Report: dist.binarypilot.cc

Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 11 HTTP transactions. The main domain is binarypilot.cc and was registered 2 months ago.

Submitted URL: https://dist.binarypilot.cc

AI Security Verdict

High Risk

Confidence: 88%

9
Risk Score

Primary domain dist.binarypilot.cc is flagged by two independent threat feeds as an 'acr stealer' malware distribution host; combined with a 49-day-old unranked domain and IDS alerts, treat as malicious and do not download or interact.

Risk Factors (5)
Multi-source corroborated threat-intel match for password/credential stealer malware on the primary domain
Very new domain (49 days) with no reputation ranking
Requested page is hidden behind a Cloudflare bot-protection challenge, so actual served content is unknown and cannot be cleared
91 eval() calls in the delivered script context (dynamic code execution)
Malware-distribution style subdomain ('dist.') on a low-reputation ccTLD
Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Domain Name Analysis

The domain name 'dist.binarypilot.cc' uses the .cc country-code top-level domain with subdomain 'dist'. The registrable portion 'binarypilot' spans 11 characters containing four vowels alongside seven consonants. Word splitting yields two words: binary, pilot. Median word length is 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dist.binarypilot.cc

Page Load Overview

11.20s
Total Load Time
664 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:392 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software74% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
74%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
114--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T144C16CD7AD96802627EA07D69873734C93306A49BA00B1C4D9F0DE8E46DCFDB546A1DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:PNybGvmXZzIEb0Ep7W87S5/YJLgzo0KgswnLn0z/WrUXqaAYzueh8Ymw:PNC2ax7BW/YFgzqzun+qahyZw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6069:kAsRqhIBgI4IhhUgJA3AUyQCAkEBcAEAHXQCIBmMAOAEAAAAgVsCLBGARKwQRAyEAABcQyBACSCTABCFAgA1EQwrQUgIhodY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc7c7ffffffffe7
Perceptual Hash:b13932cec6ccc6cc
Difference Hash:181e1c100000000c
Wavelet Hash:fcc0c0f83c3c3c00
Color Hash:#cc6ce0

Other Hashes

Crop Resistant:181e1c100000000c

Scan History

Scan history not available

Unable to load historical scan data