ScanMalware.com

Security Scan Report: ff.newtabsearch.net

Site favicon
Submitted: May 9, 2026, 5:35:40 AMCompleted: May 9, 2026, 5:36:58 AMpubliccompleted
Loading additional data...

Summary

This website contacted 7 IPs in 1 country across 5 domains to perform 29 HTTP transactions. The main domain is ff.newtabsearch.net and was registered NaN years ago.

Submitted URL: https://ff.newtabsearch.net/offer?cid=10972&clickid=91166443370&cachecode=nsZBWcJuGj9yXtvHEtbVVQ%3D%3D&dkw=wii.hack.guide&pid=381128&rhi=448e750c-547b-47d8-a3f7-e09a8f07bf8c

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

The site offers a potentially unwanted Firefox add‑on and triggers critical obfuscation alerts, indicating moderate risk.

Risk Factors
Unranked domain with low reputation
Critical and high IDS alerts for JavaScript obfuscation
Use of Function() constructor (code generation)
Potentially unwanted browser add‑on download prompt
Safety Factors
Domain age > 180 days (761 days)
No credential or payment forms present
No malicious JavaScript YARA patterns detected
Low overall JavaScript obfuscation score
Domain age information unavailable

Details

Page Title

Continue...

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(59%)

Domain Information

Within the network infrastructure generic top-level domain (.net), 'ff.newtabsearch.net' is registered, featuring subdomain 'ff'. The core label 'newtabsearch' covers 12 characters holding 4 vowels versus 8 consonants. Segmentation suggests three words: new, tab, search. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ff.newtabsearch.net/offer?cid=10972&clickid=91166443370&cachecode=nsZBWcJuGj9yXtvHEtbVVQ%3D%3D&dkw=wii.hack.guide&pid=381128&rhi=448e750c-547b-47d8-a3f7-e09a8f07bf8c

Page Load Overview

1.99s
Total Load Time
29
HTTP Requests
5
Domains
400 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:1,223 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software59% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
59%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5142.251.20.94United States
AS15169Google LLC
4151.101.2.217United States
AS54113Fastly, Inc.
4172.67.160.239United States
AS13335Cloudflare, Inc.
4104.21.73.100United States
AS13335Cloudflare, Inc.
4142.251.14.95United States
AS15169Google LLC
4104.17.25.14United States
AS13335Cloudflare, Inc.
4104.17.24.14United States
AS13335Cloudflare, Inc.
297--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A4D3E84A09B3102651DB417E6BEBB748313081876D56BC593B9C4344CFCEE9E73B27AA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Z9FKDSGiNnHV7s3Ytr7Bou26Y3xFrZArDyGP13vi7hICtXnT+VgtzBiA2g9ohomT:Z9FKF47UYtr7BoR0K7hICtX6rn

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:130233:5QAycQRJhKhMEYQOECMDGkYQAFDrIGMOUQUuxYFggkoIoAFWmEQsto4I7EGMB4Wzo+pTLIKoScoBZrIMgghZGCIYHSBGBSTM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c3c3c3c0000
Perceptual Hash:9ec531c7c3c98c36
Difference Hash:3106696969691638
Wavelet Hash:00043c3c3c3c8000
Color Hash:#78703a

Other Hashes

Crop Resistant:3106696969691638

Scan History

Scan history not available

Unable to load historical scan data