Security Scan: Just a moment...

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/15394f4d-d46b-4979-8d99-d879423f1bc7 Domain and IP registration (RDAP)/api/v1/rdap/15394f4d-d46b-4979-8d99-d879423f1bc7How often this domain was scanned/api/v1/domain/stats/claudedesktop-llm.gitlab.io Scan history for this domain/api/v1/domain/history/claudedesktop-llm.gitlab.io?limit=15

This website contacted 3 IPs in 1 country across 4 domains to perform 18 HTTP transactions. The main domain is gitlab.io and was registered 14 years ago.

Submitted URL: https://claudedesktop-llm.gitlab.io

Effective URL:

https://gitlab.com/users/sign_in

Redirected

AI Security Verdict

Moderate Risk

Confidence: 75%

Risk Score

claudedesktop-llm.gitlab.io is flagged as ClearFake/exploit-kit malware by 3 feeds (MISP, ThreatFox). Page content was hidden behind a Cloudflare bot wall, so evidence is unknown, not clean.

Risk Factors (5)

Multi-source corroborated threat-intel match identifying the scanned domain as a ClearFake/exploit-kit malware indicator (MISP scanmalware x2, ThreatFox abuse.ch)

Named malware family attributed to the page's own primary domain

91 eval() calls / dynamic code execution in the served JavaScript (content unverifiable behind the bot wall)

Circular redirect flagged, with 3 cross-domain hops in the chain

Domain is unranked in Cisco Umbrella top 1M and sits on free gitlab.io shared hosting (weak prior only)

Safety Factors (3)

Brand check passed — no impersonation of a different entity detected in the captured content

Final destination is the legitimate gitlab.com sign-in page, reached via redirect

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 8 to 3

Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Favicon Hash

MMH3: 1265477436

MD5: 66f9a1c3f2cfd0df1b570990e86d3095

Domain Name Analysis

The domain name 'claudedesktop-llm.gitlab.io' uses the British Indian Ocean Territory country-code top-level domain (.io) with subdomain 'claudedesktop-llm'. The registrable portion 'gitlab' spans 6 characters split between 2 vowels and four consonants. Word splitting yields 3 words: g, it, lab. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

21.81s

Total Load Time

646 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:374 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software75% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

75%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	172.65.251.78Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	35.185.44.232Google · CDN	North Charleston, South Carolina, United States	AS396982Google LLC
6	104.18.95.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
18	3	-	-