ScanMalware.com

Security Scan Report: tonocddquv.duckdns.org

Submitted: Oct 25, 2025, 3:09:11 PMCompleted: Oct 25, 2025, 3:11:23 PMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 15 HTTP transactions. The main domain is tonocddquv.duckdns.org.

Submitted URL: http://tonocddquv.duckdns.org/en/

AI Security Verdict

High Risk

Confidence: 95%

7
Risk Score

Site flagged as high‑risk due to malicious primary domain and lack of reputation.

Risk Factors
Primary domain matches malicious Indicators of Compromise
Use of a dynamic DNS service (duckdns.org) commonly abused by attackers
Domain age unknown and appears to be brand‑new
Unranked domain with no established reputation
Empty page displaying a server error (potential lure for users)
Domain age information unavailable

Details

Page Title

Untitled

Scan Type

public

Language

🇻🇳

VI

(43% confidence)

Category

malicious

(29%)

Domain Information

The domain 'tonocddquv.duckdns.org' uses the non-profit oriented generic top-level domain (.org) with subdomain 'tonocddquv'. The core label 'duckdns' covers 7 characters with 1 vowel and six consonants. It segments into two words: duck, dns. Median word length comes out to 3.5 characters. 'duck' is most common in French usage. It also appears in Slovak and German contexts.

Screenshot

Security scan screenshot of http://tonocddquv.duckdns.org/en/

Page Load Overview

128.02s
Total Load Time
15
HTTP Requests
1
Domains
41 KB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:43%
Script:Unknown
Direction:ltr

Detection Details

Language Code:vi
Detection Confidence:43%
Script Type:Unknown
Text Length:489 chars
Detector Agreement:50%

All Detected Languages

🇻🇳vi(100%)🇨🇳zh(0%)

Website Classification

Primary Category

malicious29% confidence
Type: static
Method: ml+structural

All Detected Categories

malicious
29%
suspicious phishing
26%
other
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15103.80.134.11Seoul, Seoul, South Korea
AS3786LG DACOM Corporation
151--

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data