Security Scan: C2 Панель

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d5734112-98f7-49f7-890a-56ccc0238926 Domain and IP registration (RDAP)/api/v1/rdap/d5734112-98f7-49f7-890a-56ccc0238926How often this domain was scanned/api/v1/domain/stats/check.neewsoo.com Scan history for this domain/api/v1/domain/history/check.neewsoo.com?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 7 HTTP transactions. The main domain is neewsoo.com and was registered 2 months ago.

Submitted URL: https://check.neewsoo.com/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Criminal C2/stealer-builder admin panel: exposes victim credential, cookie and crypto logs, polymorphic crypting, BYOVD/UAC-bypass evasion and fake-error payload delivery. Parent domain flagged as malware; HIGH IDS alert. Do not interact.

Risk Factors (6)

Explicit criminal C2 / stealer-builder administration panel in Russian

Documented credential, cookie and crypto-wallet harvesting and per-victim log export

Malware evasion, crypting (polymorph), BYOVD, UAC bypass and anti-VM/anti-sandbox features offered to operators

Fake-error social engineering and fake download pages used to deliver payloads

Parent domain flagged as fakeapp/malware; host and IP flagged as known attacker; HIGH IDS Spamhaus alert

3 password fields (operator login to the panel) on a 69-day-old unranked domain

Domain age information unavailable

Details

Page Title

C2 Панель

Scan Type

public

Domain Name Analysis

Domain 'check.neewsoo.com' uses the commercial generic top-level domain (.com) and includes subdomain 'check'. The registrable portion 'neewsoo' spans 7 characters containing 4 vowels alongside three consonants. It segments into 3 words: nee, w, soo. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

o C2 Nanenb Boiiqure ana nponomkerna Mori Maponb

Page Load Overview

1.05s

Total Load Time

875 KB

Total Size

Language Analysis

Primary Language

🇷🇺Russian

Code: ru

Confidence:80%

Script:Cyrillic

Direction:ltr

Detection Details

HTML Lang Attribute:ru

Text Length:3,446 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical71% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

healthcare medical

71%

cryptocurrency blockchain

62%

finance banking

60%

adult content

59%

real estate property

57%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	37.77.150.214	Russia	AS198953Proton66 OOO
7	1	-	-

Detected Technologies3

Ubuntu

40%

Nginxv1.18.0

40%

Chart.js

20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EFD274315169683B562380D6F4E4EF1E34D6C73FEB87160092FC4BEE23D6DA0CA19469

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:DQl5W5BvUykiWNnNyfmVmZEFsskNJqO5Qptbtoj:W5W5BviiWNnNyfmVmZEFsskNJqcQ5oj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30179:RibASBIzioCmHAdbqwAA0IiiSjEghIpBwCwtAFkAM0CEkKYANgFXCQngA0a8wBAgEyPADCREEYxEwZEB8hQADRmqslQEIcAR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:183c7e3c18180000

Perceptual Hash:9da6339966629966

Difference Hash:e0e0f0f070326830

Wavelet Hash:3c7e7e7e3c183c00

Color Hash:38001c00000

Other Hashes

Crop Resistant:e0e0f0f070326830

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: check.neewsoo.com