Security Scan: Verification Required

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/23b8ec3f-0806-400f-993d-87d52488fe04 Domain and IP registration (RDAP)/api/v1/rdap/23b8ec3f-0806-400f-993d-87d52488fe04How often this domain was scanned/api/v1/domain/stats/wage-britannica-indicated-qualifying.trycloudflare.com Scan history for this domain/api/v1/domain/history/wage-britannica-indicated-qualifying.trycloudflare.com?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is trycloudflare.com and was registered 8 years ago.

Submitted URL: https://wage-britannica-indicated-qualifying.trycloudflare.com/

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

ClickFix fake-CAPTCHA page that copies a hidden, base64-encoded PowerShell command to the clipboard and tells victims to run it via Win+R. Confirmed malware delivery on a throwaway Cloudflare tunnel; do not paste or run anything.

Risk Factors (5)

Encoded PowerShell command embedded in page JavaScript with hidden-window stealth flags

Clipboard hijacking (pastejacking / clickfix shell injection) with 10 observed clipboard events

Fake 'Verify you are human' CAPTCHA pretext instructing Windows + R / Ctrl + V / Enter

Anonymous throwaway tunnel hosting (trycloudflare.com subdomain) with zero legitimate content or forms

Critical network IDS detection of encoded PowerShell malware traffic

Domain age information unavailable

Details

Page Title

Verification Required

Scan Type

public

Domain Name Analysis

Domain 'wage-britannica-indicated-qualifying.trycloudflare.com' uses the commercial generic top-level domain (.com) and includes subdomain 'wage-britannica-indicated-qualifying'. The core label 'trycloudflare' covers 13 characters with 4 vowels and nine consonants. Breaking it apart gives 3 words: try, cloud, flare. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.24s

Total Load Time

3 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:317 chars

Detector Agreement:67%

Website Classification

Primary Category

documentation technical46% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

46%

technology software

39%

healthcare medical

34%

government public service

29%

adult content

29%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	104.16.231.132Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.16.230.132Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	2	-	-

Detected Technologies2

Cloudflare Bot Management

40%

Cloudflare

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11A810BBB13660C38DA7FB012570927C93061D017C5579168E56EACF85FE8F50DB664C8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nSVLj/topvO3RwcCY0sDZQYx+kf+BsbYlcUkHj:Sf+copYwo+aocZHj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4118:AAUiBAEaHggBAAOAMyQIWACAECJCEAAECBCAAAFEAEAASjAFMxAhAAEAAIAJkA4AIICCQAIEMCEKBAAAJCzwgwAGAGVIEJAC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000183c3c380000

Perceptual Hash:cc9933668e99cccc

Difference Hash:100c323220201400

Wavelet Hash:f8c0fcfc3c3c003c

Color Hash:#2d8665

Other Hashes

Crop Resistant:100c323220201400

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: wage-britannica-indicated-qualifying.trycloudflare.com