Security Scan: Checking if you are human

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/380c801a-5861-474e-9e4b-13aa9fe85e94 Domain and IP registration (RDAP)/api/v1/rdap/380c801a-5861-474e-9e4b-13aa9fe85e94How often this domain was scanned/api/v1/domain/stats/chinana5.com Scan history for this domain/api/v1/domain/history/chinana5.com?limit=15

This website contacted 10 IPs in 4 countries across 6 domains to perform 8 HTTP transactions. The main domain is chinana5.com and was registered 4 years 9 months ago.

Submitted URL: https://chinana5.com/

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

ClickFix fake-CAPTCHA page impersonating Cloudflare that copies a cmd/curl/wscript command to the clipboard to download and run a remote VBS payload from 178.17.59.40 — confirmed malware delivery.

Risk Factors (5)

Fake 'Verify you are human' / reCAPTCHA lure instructing victims to press Win+R and paste a copied command

Clipboard hijacking (pastejacking) injecting a cmd/curl/wscript payload download

Remote VBS script fetched from a bare IP address and executed to drop malware in %temp%

Brand impersonation of Cloudflare branding/Ray ID to appear as a security interstitial

Deceptive instructions to hold Windows Key + R and Ctrl+V — a classic ClickFix execution chain

Domain age information unavailable

Details

Page Title

Checking if you are human

Scan Type

public

Domain Name Analysis

The domain name 'chinana5.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The core label 'chinana5' covers 8 characters split between 3 vowels and 4 consonants, along with 1 digit. Tokenizing the label suggests three words: china, na, 5. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.50s

Total Load Time

141 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:702 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software52% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

52%

documentation technical

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	160.251.71.56	Japan	AS7506GMO Internet, Inc.
0	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	195.154.239.26	Paris, Île-de-France, France	AS12876Scaleway SAS
0	149.154.167.99	Amsterdam, North Holland, Netherlands	AS62041Telegram Messenger Inc
0	149.154.165.133	Amsterdam, North Holland, Netherlands	AS62041Telegram Messenger Inc
0	195.154.239.25	Paris, Île-de-France, France	AS12876Scaleway SAS
0	142.251.155.119Google · CDN	United States	AS15169Google LLC
0	142.250.154.106Google · CDN	United States	AS15169Google LLC
0	142.251.14.103Google · CDN	United States	AS15169Google LLC
0	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	10	-	-