ScanMalware.com

Security Scan Report: woostore.dev

Redirected to:
https://cloudflare.lc/
Site favicon
Submitted: Oct 11, 2026, 6:31:03 PMCompleted: Oct 11, 2026, 6:31:39 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9f9e3366-b6d7-47c8-808f-d110ed8dcf65Domain and IP registration (RDAP)/api/v1/rdap/9f9e3366-b6d7-47c8-808f-d110ed8dcf65Certificate Transparency/api/v1/ct/cloudflare.lcHow often this domain was scanned/api/v1/domain/stats/woostore.devScan history for this domain/api/v1/domain/history/woostore.dev?limit=15

This website contacted 4 IPs in 3 countries across 4 domains to perform 5 HTTP transactions. The main domain is cloudflare.lc and was registered 1 week ago.

Submitted URL: https://woostore.dev/

Effective URL:

https://cloudflare.lc/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Cloudflare CAPTCHA on cloudflare.lc impersonating Cloudflare; analyst-vetted ClickFix FakeCAPTCHA/FileFix/macOS Terminal kits identified. Never copy or paste any command it shows. Confirmed scam.

Risk Factors (5)
Brand impersonation of Cloudflare on the unrelated domain cloudflare.lc
ClickFix fake-CAPTCHA kit instructing users to paste shell/LOLBin commands (malware execution)
Multiple CRITICAL/HIGH analyst-vetted malicious kit identifications
Cross-origin beaconing to unreputable third-party hosts
Entry domain woostore.dev registered 3 days ago
Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Domain Name Analysis

The domain 'woostore.dev' uses the developer-focused generic top-level domain (.dev) and has no subdomain. Count 8 characters in 'woostore' holding four vowels versus four consonants. It segments into 2 words: woo, store. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://woostore.dev/

Page Load Overview

2.65s
Total Load Time
210 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:16 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2193.233.82.69Amsterdam, North Holland, Netherlands
AS209207Digital Hosting Provider LLC
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1193.233.126.164Amsterdam, North Holland, Netherlands
AS209207Digital Hosting Provider LLC
1195.58.146.210Denmark
AS9009M247 Europe SRL
54--

Detected Technologies4

reCAPTCHA
45%
HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AF2195BCB99221B0178E707C302FDF29F87B5132BE458800D695A5752DB0FAFE056A4C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hRdhdItID9JtJfRIqSxh/fucMbzAmRYcGnRGELKkBiITYabbg1bqKj:TXdcMJbiXbj6TeR4kUIFbUt9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1323:CAAAAAAAAAAAIAAAAgAAAAAAIAAAAAIABCAAAAGACABIAAAFAAQBRAAAAAAgCABAAAAAAggAAAQAAAAAAAAAAAAAAIQAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fcfcceeefece7e00
Perceptual Hash:d1d546d60ab13b99
Difference Hash:0424181a2a1a86c1
Wavelet Hash:fcfcccfe2e023c00
Color Hash:#783a43

Other Hashes

Crop Resistant:0424181a2a1a86c1

Scan History

Scan history not available

Unable to load historical scan data