Security Report: dreambot.cc - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d60baba1-4756-4885-8070-da2d6c712244 Domain and IP registration (RDAP)/api/v1/rdap/d60baba1-4756-4885-8070-da2d6c712244How often this domain was scanned/api/v1/domain/stats/dreambot.cc Scan history for this domain/api/v1/domain/history/dreambot.cc?limit=15

This website contacted 3 IPs in 2 countries across 3 domains to perform 12 HTTP transactions. The main domain is dreambot.cc and was registered 1 week ago.

Submitted URL: https://dreambot.cc

AI Security Verdict

Confirmed Scam

Confidence: 85%

Risk Score

New 3-day-old domain distributing a Java .jar that URLHaus flags as malware_download; domain tagged Unknown Stealer and its host IP flagged as coinminer by two feeds. Do not download or run the client.

Risk Factors (6)

Domain registered 3 days ago (2026-10-20) with zero reputation in Cisco Umbrella top 1M

Site's own downloadable .jar flagged as malware_download by URLHaus

Primary domain tagged as Unknown Stealer by ThreatFox

Hosting IP flagged as coinminer/malware by two independent threat-intel feeds

Promotes a self-updating executable ('the client tells you and swaps itself out') with no publisher identity — an easy malware update channel

Page itself acknowledges ToS-violating automation likely to get user accounts banned

Domain age information unavailable

Details

Page Title

DreamBot — set it running, go to sleep

Scan Type

public

Favicon Hash

MMH3: -2018376948

MD5: c1406fe7303d4a8218d016d4035d4cc3

Domain Name Analysis

The domain 'dreambot.cc' uses the .cc country-code top-level domain and has no subdomain. The core label 'dreambot' covers 8 characters holding 3 vowels versus five consonants. Splitting it apart reveals two words: dream, bot. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.54s

Total Load Time

311 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:2,137 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical75% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical

75%

technology software

68%

cryptocurrency blockchain

65%

healthcare medical

64%

government public service

59%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	195.26.86.171	Haarlem, North Holland, Netherlands	AS43641SOLLUTIUM EU Sp z.o.o.
4	142.251.127.95Google · CDN	United States	AS15169Google LLC
4	142.250.154.94Google · CDN	United States	AS15169Google LLC
12	3	-	-