Security Scan Report: inwiththewoods.com

Submitted: Sep 22, 2026, 1:47:37 AMCompleted: Sep 22, 2026, 1:48:02 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Confirmed ClickFix fake-CAPTCHA malware page impersonating Cloudflare; it tricks users into pasting a clipboard payload into Windows Run to execute malware. Do not interact.

Risk Factors
Fake CAPTCHA page delivering a clipboard-based malware execution chain
Impersonates Cloudflare's verification widget and Ray ID branding
Instructs users to run a command via the Windows Run dialog (Win+R, Ctrl+V, Enter)
Inline scripts use encoding/decoding functions
Host IP 173.236.251.33 reported as a known attacker (single-source, unverified)
Domain age information unavailable

Details

Page Title

Checking if you are human

Scan Type

public

Domain Name Analysis

The domain 'inwiththewoods.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'inwiththewoods' spans 14 characters split between five vowels and nine consonants. Segmentation suggests four words: in, with, the, woods. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://inwiththewoods.com

Page Load Overview

4.26s
Total Load Time
137 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:714 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software51% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
51%
documentation technical
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1173.236.251.33Ashburn, Virginia, United States
AS26347New Dream Network, LLC
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1195.154.239.26Paris, Île-de-France, France
AS12876Scaleway SAS
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.155.119Google · CDNUnited States
AS15169Google LLC
1142.251.13.105Google · CDNUnited States
AS15169Google LLC
1142.251.156.119Google · CDNUnited States
AS15169Google LLC
1142.251.13.99Google · CDNUnited States
AS15169Google LLC
88--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11E228522A6601017BA57C0E8B8A3E79B32328203D7455A797DED15A0DF8FDD65EB318C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:1rKtfRJslfHR1i5k0TjVAdfn3jPxOz7SX5A2RI1MbUbj6d+uf0RNMtY/8xiZj3xp:1rKDCxlPX60pY9szC6ieW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10033:MaAGFlBiCCQESCQ7JYESIwsBnCQCEhEyAJpEIakeCiSaMSCyzBAiQPkSx6PbKBwQIAWmEUeJCENBDISggGAIDKBABggCJAQT

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc7c3c7e7e7ffff
Perceptual Hash:b030c8c6cecccfc7
Difference Hash:189c149e480c1000
Wavelet Hash:1f030303c3c7cfcf
Color Hash:#bf9540

Other Hashes

Crop Resistant:189c149e480c1000

Scan History

Scan history not available

Unable to load historical scan data