ScanMalware.com

Security Scan Report: dl.stacknode.cc

Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f923faa2-713c-450c-918b-c6676bbf9d65Domain and IP registration (RDAP)/api/v1/rdap/f923faa2-713c-450c-918b-c6676bbf9d65How often this domain was scanned/api/v1/domain/stats/dl.stacknode.ccScan history for this domain/api/v1/domain/history/dl.stacknode.cc?limit=15
This website contacted 4 IPs in 1 country across 2 domains to perform 10 HTTP transactions. The main domain is stacknode.cc and was registered 1 month ago.

Submitted URL: https://dl.stacknode.cc

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Domain dl.stacknode.cc and its parent are flagged as ACR stealer malware hosts by two corroborated threat-intel feeds; the only visible content is a Cloudflare bot wall gating the real (unscanned) download page. Avoid.

Risk Factors (4)
Multi-source corroborated Indicator of Compromise: page's own domain flagged as an ACR stealer malware host by two independent threat-intelligence feeds
Parent domain of the scanned host also flagged as the same ACR stealer infrastructure
HIGH-severity IDS alert for .cc top-level-domain DNS traffic (Potentially Bad Traffic)
Very new domain (29 days) presenting a bot-protection wall that hides the actual served content from inspection
Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Domain Name Analysis

The domain name 'dl.stacknode.cc' uses the .cc country-code top-level domain with subdomain 'dl'. The core label 'stacknode' covers 9 characters holding 3 vowels versus 6 consonants. Segmentation suggests two words: stack, node. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dl.stacknode.cc

Page Load Overview

0.69s
Total Load Time
1009 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:384 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
77%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.21.18.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.181.158Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
104--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18ED20B72EB08225B552787EF7AC0FB84013162A15616637AFCE63664DFC909A39733C7

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:+9x8FoWGzWe5P1i2ene4qrWZaTRAaZHINSFEa8pBfeqGPV5NgbWIl:NmRDqjyWZatAaZHINSFQT2qGPjWl

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28819:GaSN+uoqAHXAEgBkgQSqAYFkJIALAVXIREmApQging3gAgaATGSJUyxFSK5QSFCBEGBIKogIITNMu93UVAmqhCWBSAMJ0BYA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc3c3ffffffffe7
Perceptual Hash:b03830cec6cfc6ce
Difference Hash:109e16100000000c
Wavelet Hash:3c000c3cfcfcfcc0
Color Hash:#6a2d86

Other Hashes

Crop Resistant:109e16100000000c

Scan History

Scan history not available

Unable to load historical scan data