Security Report: user-account-nlftx.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/08fe6d7f-af98-4189-af67-a813e33b6397 Domain and IP registration (RDAP)/api/v1/rdap/08fe6d7f-af98-4189-af67-a813e33b6397How often this domain was scanned/api/v1/domain/stats/user-account-nlftx.com Scan history for this domain/api/v1/domain/history/user-account-nlftx.com?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is user-account-nlftx.com and was registered 1 week ago.

Submitted URL: https://user-account-nlftx.com/antibot/captcha.php

AI Security Verdict

High Risk

Confidence: 74%

Risk Score

3-day-old domain imitates Cloudflare's human-verification/Ray ID branding (OCR shows 'Cloudtare'/'Cloudiiare') behind an anti-bot gate. No credential fields, but the cloaking-captcha + brand mimicry on a new account-themed host is high risk.

Risk Factors (5)

Impersonation of Cloudflare's verification branding on a non-Cloudflare, 3-day-old domain

Mimicked Cloudflare Ray ID / security checkmark text with misspelled brand names ('Cloudtare', 'Cloudiiare')

Newly registered domain (3 days) used for an account-themed anti-bot interstitial

Cloaking-style captcha gate (math challenge + csrf + honeypot) that segments human traffic from scanners

Suricata HIGH ET DROP Spamhaus DROP Listed Traffic Inbound alert

Domain age information unavailable

Details

Page Title

Human verification — user-account-nlftx.com

Scan Type

public

Domain Name Analysis

Domain 'user-account-nlftx.com' uses the commercial generic top-level domain (.com) and has no subdomain. The core label 'user-account-nlftx' covers 18 characters holding five vowels versus eleven consonants; it also includes two hyphens. Breaking it apart gives four words: user, account, nlf, tx. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.42s

Total Load Time

8 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:405 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software70% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

70%

documentation technical

43%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	45.74.61.8	United States	AS20539769HOST LLC
4	1	-	-

Detected Technologies5

Cloudflare

50%

PHPv8.3.35

40%

Apache HTTP Server

40%

hCaptcha

30%

Cloudflare Bot Management

30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11D92B7E152B462F0E50AF7F8063A34796E5324FA7631C08C7AED5DC0E7906AE488EDD4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:AzslumallWzYgmtyDzslumallWzYgmtypzslumallWzYgmtyfEC:gtmallCtmall0tmallmEC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20051:igQG0AAAA2ZKQYEBYYy5QI9KHKYEgDIhM4mmhYOJAEioOQY6YSRZYAIZRUEAWCfMigOECTamRoYpRYJEAEJMhIMCC4MZcBkO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000303c3c000000

Perceptual Hash:cccc3333cccc6633

Difference Hash:0008243232200000

Wavelet Hash:0c0c3c3c3c3c3c3c

Color Hash:#40acbf

Other Hashes

Crop Resistant:0008243232200000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: user-account-nlftx.com