ScanMalware.com

Security Scan Report: cookienode-whatsapp.com

Redirected to:
https://de.yahoo.com/?p=us
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/acaa8220-b467-4d11-90d0-9933023ee789Domain and IP registration (RDAP)/api/v1/rdap/acaa8220-b467-4d11-90d0-9933023ee789How often this domain was scanned/api/v1/domain/stats/cookienode-whatsapp.comScan history for this domain/api/v1/domain/history/cookienode-whatsapp.com?limit=15
This website contacted 42 IPs in 6 countries across 51 domains to perform 978 HTTP transactions. The main domain is cookienode-whatsapp.com and was registered 4 days ago.

Submitted URL: http://cookienode-whatsapp.com

Effective URL:
https://de.yahoo.com/?p=us
Redirected

AI Security Verdict

Moderate Risk

Confidence: 72%

5
Risk Score

This disposable or newly registered address only forwards visitors to a well-known site, a common way to hide a scam from security scanners — rated moderate risk on that basis.

Risk Factors (1)
The capture entered through cookienode-whatsapp.com, a hostname thematically unrelated to Yahoo, which chain-redirected to the Yahoo site (3 redirects); the redirector's purpose is unclear
Safety Factors (3)
Final destination de.yahoo.com is the brand's own domain, ranked in the Cisco Umbrella top 1M (#365029) — not brand impersonation
Cross-origin requests observed are Yahoo analytics/consent and top-ranked ad/analytics hosts; no credential exfiltration detected
Page content is ordinary German-language Yahoo portal news, weather, finance and sports material
Domain age information unavailable

Details

Page Title

Yahoo! Deutschland | Mail, Wetter, Suche, Politik, Nachrichten, Finanzen, Sport & Videos

Scan Type

public

Domain Name Analysis

Domain 'cookienode-whatsapp.com' uses the commercial generic top-level domain (.com). Count 19 characters in 'cookienode-whatsapp' holding eight vowels versus ten consonants, plus 1 hyphen. It segments into five words: cookie, node, what, s, app. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://cookienode-whatsapp.com

Page Load Overview

5.45s
Total Load Time
16.7 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de-DE
Text Length:10,426 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software53% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
53%
download file sharing
48%
corporate
35%
news media journalism
31%
forum
20%

Detected Features

Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
35156.234.58.211Hong Kong, Hong Kong
AS138415Yancy Limited
2387.248.119.252United Kingdom
AS203220Yahoo-UK Limited
2387.248.119.251United Kingdom
AS203220Yahoo-UK Limited
233.161.82.31Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
23142.251.127.156Google · CDNUnited States
AS15169Google LLC
23146.75.121.44Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
23108.132.98.138Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
2387.248.116.76Amsterdam, North Holland, Netherlands
AS203219Yahoo-UK Limited
2334.95.69.49Google · CDNKansas City, Missouri, United States
AS396982Google LLC
23142.251.110.97Google · CDNUnited States
AS15169Google LLC
97842--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F9254A36F072C82EF76F1D8971703F296147932AE602EAE9B29CC2555387CF48A6715C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:BcbugnhwAS1FQNVbPvzVJS1FQm8FDlZk9hU8AeK5DIExN4zzS8XemFH8:szxHzVTFezS8Xesc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:976501:hACG0ASNJTMiJW9ARwCUEEUAJFJMAYAIQKqiaFgAACBYkpEUJkRQRWFpBb0RYxSBAjg4LEwNYQgACCABG0tmQFregIoCOiED

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff7c3ff81f7a1c1
Perceptual Hash:eb94639e6883b469
Difference Hash:2f17963b234e4b0b
Wavelet Hash:ffc3c3cf81a38181
Color Hash:#931f3c

Other Hashes

Crop Resistant:2f17963b234e4b0b,7fac9437f1e9c93f,9b1b323c34325f7f,c0c08030c088a080,488c8e8622890d10,536903496565d0d0

Scan History

Scan history not available

Unable to load historical scan data