ScanMalware.com

Security Scan Report: dj7mv481nzu7.cloudfront.net

Redirected to:
https://www.cloudflare.com/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b6123a15-3b2f-42e8-a387-2f7ec705d9ebDomain and IP registration (RDAP)/api/v1/rdap/b6123a15-3b2f-42e8-a387-2f7ec705d9ebHow often this domain was scanned/api/v1/domain/stats/dj7mv481nzu7.cloudfront.netScan history for this domain/api/v1/domain/history/dj7mv481nzu7.cloudfront.net?limit=15
This website contacted 38 IPs in 3 countries across 29 domains to perform 438 HTTP transactions. The main domain is cloudfront.net and was registered 18 years ago.

Submitted URL: https://dj7mv481nzu7.cloudfront.net/dp/b07984jn3l

Effective URL:
https://www.cloudflare.com/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Rendered page is Cloudflare's genuine homepage (no forms, no impersonation), but the entry CloudFront URL is reported as a Cobalt Strike host and uses an Amazon-style /dp/ lure path before redirecting away - avoid.

Risk Factors (4)
Entry URL flagged as Cobalt Strike malware distribution (single-source community intelligence, unverified)
Malware-style /dp/ path on an unrelated CloudFront distribution
Cross-domain redirect from the flagged distribution to an unrelated brand site, consistent with cloaking
CloudFront subdomain with unattributable creation date and no independent reputation
Safety Factors (2)
Final destination www.cloudflare.com is Cloudflare's own established domain (Cisco Umbrella top 1M), so no brand impersonation of the rendered page
Single IDS alert is informational only and is explicitly stated to be a low-fidelity heuristic
Domain age information unavailable

Details

Page Title

Cloudflare: Build for the agent era

Scan Type

public

Domain Name Analysis

The domain 'dj7mv481nzu7.cloudfront.net' uses the network infrastructure generic top-level domain (.net); it also runs on subdomain 'dj7mv481nzu7'. The registrable portion 'cloudfront' spans 10 characters containing three vowels alongside 7 consonants. Breaking it apart gives 2 words: cloud, front. Median word length comes out to five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dj7mv481nzu7.cloudfront.net/dp/b07984jn3l

Page Load Overview

5.60s
Total Load Time
32.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:10,165 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software56% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
56%
corporate business
36%
corporate
35%
documentation technical
32%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
31104.16.123.96Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1118.245.78.7Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
11104.16.132.229Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11142.251.20.97Google · CDNUnited States
AS15169Google LLC
11104.18.86.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1118.245.78.130Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
11104.16.124.96Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11104.18.32.137Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
43838--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E1950BF6CA1142BE0E8FD2D6CC526088676FF1DA2713D2F8F15ED6206E4ADE6D702446

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:Kh1emRkln2YbabbcfSB62N/I8blOXuqPJyfSB62N/I8blOXuqPJ5dLjaP6wF8b13:E1Fkl22cldV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1889518:q5gyFxsBEYkSxkEIQAHTCd7BNqBLmjiABACCZABcFkAANhQERqQgCQ0Whw4CBIyEFCCAJhihWEcxpSUwCiISZAWTGgCAhBNc

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff818181818199ff
Perceptual Hash:af3fd12cd1cc9184
Difference Hash:6b23336b33333308
Wavelet Hash:ff8181818181bdff
Color Hash:#d22d9b

Other Hashes

Crop Resistant:6b23336b33333308

Scan History

Scan history not available

Unable to load historical scan data