Security Scan Report: content.duskrunner.cc

Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 10 HTTP transactions. The main domain is duskrunner.cc and was registered 3 weeks ago.

Submitted URL: https://content.duskrunner.cc

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Primary domain and its parent are both multi-source corroborated as 'acr stealer' malware hosts. 15-day-old, unranked, hidden behind a Cloudflare challenge. Treat as malicious — do not interact.

Risk Factors (5)
Two multi-source corroborated content-malware Indicators of Compromise (ACR stealer) naming this host and its parent domain
15-day-old domain (VERY_NEW risk category)
Unranked / no reputation in Cisco Umbrella top 1M
.cc TLD raising a HIGH severity IDS alert
Real page content concealed behind a bot-protection challenge, preventing verification of purpose
Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Domain Name Analysis

The domain 'content.duskrunner.cc' uses the .cc country-code top-level domain; it also runs on subdomain 'content'. The registrable portion 'duskrunner' spans 10 characters holding three vowels versus seven consonants. Breaking it apart gives two words: dusk, runner. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://content.duskrunner.cc

Page Load Overview

26.09s
Total Load Time
1002 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:827 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical72% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
72%
technology software
66%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
104--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B5D20972EB08225B55378AEFB6C0FB84113162A15616637AFCE736649FC90463A733C7

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:H5xKFoWGzWe5P1i2ene4qrWZaTRAaZHINSFEa8pBfeqGTos25U717:HCmRDqjyWZatAaZHINSFQT2qGTrJ7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28865:A+ZMfQAKYI5Eo9ZAgEqqgIPhhAEMG1iAHGHDSHimDgPAUkGAUgAA2AgkMihgBBCAAAlOSwAwno7Ui8qKFMkgnIAVCCC92DRE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc3c3ffffffffe7
Perceptual Hash:b03932cec6cec6cc
Difference Hash:189e16100000000c
Wavelet Hash:fcc0ccfc3c3c3c00
Color Hash:#92e06c

Other Hashes

Crop Resistant:189e16100000000c

Scan History

Scan history not available

Unable to load historical scan data