Security Scan Report: cherokeemech.net

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 8 HTTP transactions. The main domain is cherokeemech.net and was registered 1 year ago.

Submitted URL: https://cherokeemech.net

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Domain is a single-source bashlite malware report and the origin server is currently down (Cloudflare 521), serving no content. The content-malware Indicator of Compromise drives a HIGH_RISK rating, though it is unverified.

Risk Factors (2)
Primary domain flagged as a bashlite malware host in threat intelligence (single-source, unverified)
Origin web server unreachable (HTTP 521); site not serving any legitimate content
Domain age information unavailable

Details

Page Title

cherokeemech.net | 521: Web server is down

Scan Type

public

Domain Name Analysis

The domain name 'cherokeemech.net' uses the network infrastructure generic top-level domain (.net). Its registrable label 'cherokeemech' stretches across 12 characters split between 5 vowels and seven consonants. Segmentation suggests three words: cherokee, me, ch. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Web server is down Visit cloudflare.com for more information. 2026-09-14 15:49:08 UTC fo & You Stockholm cherokeemech.net Browser Cloudflare Host Working Working Error what happened? what can I do?...

Page Load Overview

12.05s
Total Load Time
23 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:692 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical71% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
71%
technology software
63%
government public service
42%
cryptocurrency blockchain
37%
news media journalism
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.21.43.32Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.67.217.251Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
82--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18CE15671B1B5127600A3C1D23695FB6979E0C613CBEF4598B3DCC2632F9EE82E943190

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:ljHjCIjuADa/D2KUuUG4Fh8/G4Ff/424FZ+skKmk2OLwmNnwL5cWQFRc3gaQxJ:ljHjDjuEa/CqUeujVO/Q85QF+3reJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6949:kkDqEEdyAgICsgBJMkbQmEhWwANSQAQBo5hCjKAHBOkkAiCEVICSyBMShCKBMIIAEAEADR4egISjlCCE5AQEJGQBMiEMomGB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c70000d7f7ffff
Perceptual Hash:b4389abc9a676531
Difference Hash:1c3e8e8a3406061c
Wavelet Hash:c7000000d7f3f7ff
Color Hash:N/A

Other Hashes

Crop Resistant:1c3e8e8a3406061c

Scan History

Scan history not available

Unable to load historical scan data