Security Scan Report: volcano.wtf

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 5 domains to perform 25 HTTP transactions. The main domain is volcano.wtf and was registered 1 year 4 months ago.

Submitted URL: https://volcano.wtf/

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Self-branded software-download site on an aged domain with no threat-intel or form evidence, but it makes a false claim of being the original 'Electron' codebase, uses scare text against other domains, and serves its download via an unranked third-party token host — treat any binary with caution.

Risk Factors (5)
False heritage claim linking the product to another entity's established project (Electron)
Warns users that all other domains serving this product are 'malware or a virus' to lock traffic to this site
Executable download delivered through an unranked third-party token service (vv.vvapi.co) rather than the site's own infrastructure
Low business legitimacy score (15/100); domain unranked in Cisco Umbrella; no verifiable corporate identity, contact or legal pages
Distribution model resembles gray-market software/executor sites, which commonly bundle unwanted or malicious payloads
Safety Factors (5)
Domain registered 482 days ago (established age category)
Site title/meta self-brand 'Volcano' matches its own domain — no impersonation of a different company's site
No credential-harvesting or payment forms on the page
No Indicators of Compromise, hunting rule malware patterns, Safe Browsing hits or IDS alerts recorded
Content is coherent software-product material; third-party assets (jsDelivr, Google Fonts) are standard
Domain age information unavailable

Details

Page Title

Volcano — Get the job done

Scan Type

public

Domain Name Analysis

The domain name 'volcano.wtf' uses the .wtf top-level domain without a subdomain. Its registrable label 'volcano' stretches across 7 characters with 3 vowels and four consonants. Segmentation suggests one word: volcano. No strong language cues emerged from the frequency lists.

Screenshot

3 VOLCANO @ Discord volcano.wtt ; Download MA Docs @ Discord The original domain — any other Is likely malware or a virus. Best stability. Garmilace ayariitinn

Page Load Overview

2.85s
Total Load Time
470 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,000 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software91% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
91%
documentation technical
89%
government public service
52%
cryptocurrency blockchain
46%
blog personal website
38%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
946.19.140.43Switzerland
AS51852Private Layer INC
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
2151.101.129.229Fastly · CDNUnited States
AS54113Fastly, Inc.
2104.21.85.111Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
2142.251.127.95Google · CDNUnited States
AS15169Google LLC
2104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.250.154.94Google · CDNUnited States
AS15169Google LLC
2172.67.204.210Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
259--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D6F2712556B390FE1C7BB2692BAF570CB658A027AC05CD847F9C22449FC2BF5E847748

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:qLzbAosTdnH1+Od/fNeucOdnH1+OdymM4FWeOcednH1+OdDSDyugdnH1+OdceDfR:qLz4TdHd8idHRSdH4gdH7p

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:36929:QFBpEBECADRCCAcKUg4EYAQ4gKQB5LIUjBBDDB0rhoPKQ8LYEHcUJgwYGESQCqCzFrVAqmACYIiA0ikqAAFpgAUcELQcCMAI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c080007e7c002061
Perceptual Hash:c37c6959c7343269
Difference Hash:15030dd4d919c5cb
Wavelet Hash:e5c1817d7f390171
Color Hash:N/A

Other Hashes

Crop Resistant:15030dd4d919c5cb

Scan History

Scan history not available

Unable to load historical scan data