ScanMalware.com

Security Scan Report: amx.necomoner.top

Submitted: Sep 13, 2026, 1:26:51 PMCompleted: Sep 13, 2026, 1:27:09 PMpubliccompleted

Summary

This website contacted 2 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is amx.necomoner.top and was registered 3 weeks ago.

Submitted URL: https://amx.necomoner.top/index.html

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Only a Cloudflare 520 error page — no content, forms, or malware. Risk comes solely from a 24-day-old unranked .top domain; no concrete phishing or credential-harvesting signal found.

Risk Factors
Very new domain (24 days old)
Unranked domain with no established reputation
.top TLD associated with elevated abuse rates
Safety Factors
Zero forms — no password, email/username, or payment fields present
No Indicators of Compromise against the page or its resources
No JavaScript malware / YARA patterns detected
No known phishing kit in the kit roster
No cross-origin credential exfiltration detected
No brand impersonation; page displays only its own Cloudflare error/domain branding
Domain age information unavailable

Details

Page Title

necomoner.top | 520: Web server is returning an unknown error

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

documentation technical

(46%)

Domain Information

The domain name 'amx.necomoner.top' uses the .top top-level domain and includes subdomain 'amx'. Count 9 characters in 'necomoner' split between four vowels and five consonants. Segmentation suggests three words: ne, como, ner. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://amx.necomoner.top/index.html

Page Load Overview

0.70s
Total Load Time
8
HTTP Requests
1
Domains
19 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:1,038 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical46% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
46%
technology software
43%
cryptocurrency blockchain
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
82--

Page Statistics

8
Requests
1
Unique Domains
23.6 KB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D9E16471B2F1127700A381913795EB6A7AE0C213C7FF4594B39DC6631FAEE81E943294

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:l9dDa/D2KU4dG4Fh8/G4FxV424F8+skKmv9eQmN7UWuCIinRC3WaQxx:lLa/Cye66V8VIruninM3xex

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7067:6egFAiIiKiEE8U4roSzAgIkCUCArIBlBUQ5AsCSaIAASAkSQAgKwkBBZ+Cg4wIEQKIAhUhARCcPRAgREUBRACKiVlgJZgQAC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3dfff0000c6d7f3
Perceptual Hash:f419ac386524cecf
Difference Hash:163a308e0e241406
Wavelet Hash:c3cfdf000086d7f3
Color Hash:#1f5b93

Other Hashes

Crop Resistant:163a308e0e241406

Scan History

Scan history not available

Unable to load historical scan data