Security Scan Report: aldefix.com

Submitted: Oct 11, 2026, 3:08:15 PMCompleted: Oct 11, 2026, 3:08:48 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Direct .exe download URL on a 12-day-old domain is flagged by two independent threat feeds as an unknown stealer, corroborated by an IDS executable-download alert. Do not download or execute this file.

Risk Factors (4)
Direct executable download path on the scanned domain
Multi-source threat-intel classification as an unknown stealer (malware)
Very new domain (12 days old) used to host an executable
Host unreachable/broken (Cloudflare Tunnel not resolving), typical of short-lived malware-hosting setups
Domain age information unavailable

Details

Page Title

Cloudflare Tunnel error | aldefix.com | Cloudflare

Scan Type

public

Domain Name Analysis

The domain name 'aldefix.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'aldefix' spans 7 characters split between 3 vowels and 4 consonants. Segmentation suggests 3 words: al, de, fix. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://aldefix.com/aldefix.exe

Page Load Overview

0.49s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:789 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical28% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
28%
technology software
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.21.22.178Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.30.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
192.223.124.62Frankfurt am Main, Hesse, Germany
AS199524G-Core Labs S.A.
1185.111.111.156Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
164.185.181.238United States
AS40009BitGravity, Inc.
1104.17.231.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1103.21.244.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.206.92Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.31.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1193.108.153.158Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2321--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19EE196B3F1F8263A0053C2A231A9B7197DA5D027DB6304E17A9E85721F9EF81FD13284

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:ljHjDjuta/Paawl24z7z+V9CPZG9Lnd3CeNwQSARn:Sa/il2tVM8Lnd3CeZN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7404:AREMQIQCAny3aZxApynkBIEZ7ABCKCEWABSIa4M1BFMMoTQBAAMcAUOsIiQiKjfAiAIWAwQAKCIDGICABQQgN8I8QUZByAgC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7cfcfcfcfe7ffff
Perceptual Hash:b838c7671838e793
Difference Hash:1c3c1830180c1400
Wavelet Hash:8088848c87c3cfcf
Color Hash:#782d86

Other Hashes

Crop Resistant:1c3c1830180c1400

Scan History

Scan history not available

Unable to load historical scan data