Security Report: check-hc6vuu9w.devwatchbuild.me - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e91d3694-c284-4b17-81c0-54dc30bdcab5 Domain and IP registration (RDAP)/api/v1/rdap/e91d3694-c284-4b17-81c0-54dc30bdcab5 Certificate Transparency/api/v1/ct/check-hc6vuu9w.devwatchbuild.me How often this domain was scanned/api/v1/domain/stats/check-hc6vuu9w.devwatchbuild.me Scan history for this domain/api/v1/domain/history/check-hc6vuu9w.devwatchbuild.me?limit=15

This website contacted 6 IPs in 1 country across 6 domains to perform 19 HTTP transactions. The main domain is check-hc6vuu9w.devwatchbuild.me and was registered 3 years ago.

Submitted URL: https://check-hc6vuu9w.devwatchbuild.me/?address=2AF7CqwieUjUPALL7icuZtL3X7wENdjUjGBMmfV2pump

AI Security Verdict

Low Risk

Confidence: 78%

Risk Score

Six-day-old, unranked domain flagged as phishing that hosts a Solana wallet-analysis page gated behind wallet connection with obfuscated dynamic code — high risk of a wallet drainer; do not connect a wallet.

Risk Factors (5)

Domain age 6 days (CRITICAL)

Primary domain flagged as phishing by threat intelligence

Wallet-connect gating for 'full access' on an unverified new domain

Use of Function() constructor for code generation

IDS alert: ET DNS Query for .cc TLD (potentially bad traffic)

Safety Factors (5)

No password, disguised-password, or payment fields present in the captured DOM (0 forms total)

No YARA JavaScript malware patterns detected

No credential exfiltration or cross-origin form submission detected

Page provides substantive explanatory content and uses mainstream Solana infrastructure (Google Fonts, Helius RPC, pump.fun API)

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 8 to 3

Domain age information unavailable

Details

Page Title

DEVWATCH — Analysis: 2AF7Cqwi...pump

Scan Type

public

Favicon Hash

MMH3: 1051558944

MD5: 2010b80e2ec9ace8f950311195a66d50

Domain Name Analysis

Within the Montenegrin country-code top-level domain (.me), 'check-hc6vuu9w.devwatchbuild.me' is registered and includes subdomain 'check-hc6vuu9w'. The registrable portion 'devwatchbuild' spans 13 characters with four vowels and nine consonants. Breaking it apart gives 3 words: dev, watch, build. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.35s

Total Load Time

429 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:3,058 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence

Type: static

Method: structural

All Detected Categories

corporate

50%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	142.251.14.95Google · CDN	United States	AS15169Google LLC
3	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.250.154.94Google · CDN	United States	AS15169Google LLC
3	172.64.151.87Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	172.64.153.234Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
19	6	-	-