Security Report: angelabermudo.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0303531c-fa67-4ec9-9973-6135e38179d1 Domain and IP registration (RDAP)/api/v1/rdap/0303531c-fa67-4ec9-9973-6135e38179d1How often this domain was scanned/api/v1/domain/stats/angelabermudo.com Scan history for this domain/api/v1/domain/history/angelabermudo.com?limit=15

This website contacted 16 IPs in 3 countries across 13 domains to perform 386 HTTP transactions. The main domain is angelabermudo.com and was registered 10 years ago.

Submitted URL: https://angelabermudo.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Established domain appears hijacked and serves a fake Cloudflare bot check that tells visitors to paste a PowerShell command, backed by EtherHiding IDS alerts and a Safe Browsing Social Engineering hit. Do not interact.

Risk Factors (5)

Fake bot-verification page using social engineering to make the visitor paste a command into Windows PowerShell/Terminal (ClickFix)

Impersonation of another entity's brand (Cloudflare) on a domain that is not cloudflare.com

Content-malware threat-intelligence match on the PRIMARY domain corroborated by two independent feeds

Google Safe Browsing Social Engineering threat on the page

20 CRITICAL IDS alerts for 'ET MALWARE EtherHiding Exfil', plus blockchain RPC connections used for payload hosting/exfiltration

Domain age information unavailable

Details

Page Title

Angela Bermudo - Angela Bermudo

Scan Type

public

Domain Name Analysis

The domain 'angelabermudo.com' uses the commercial generic top-level domain (.com) with no subdomain. The second-level label 'angelabermudo' is 13 characters long with six vowels and seven consonants. Splitting it apart reveals three words: angela, berm, udo. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

9.26s

Total Load Time

1.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,061 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software77% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

77%

documentation technical

54%

news media journalism

42%

government public service

31%

blog personal website

29%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
26	35.203.2.158Google · CDN	Montreal, Quebec, Canada	AS396982Google LLC
24	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
24	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
24	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
24	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
24	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
24	52.223.48.152Aws · CLOUD	United States	AS16509Amazon.com, Inc.
24	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
24	45.149.145.133	Seychelles	AS200195Verasel, Inc.
24	142.251.13.94Google · CDN	United States	AS15169Google LLC
386	16	-	-