Security Scan Report: id-dns.net

Site favicon
Submitted: Oct 14, 2026, 11:45:28 PMCompleted: Oct 14, 2026, 11:46:01 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

ClickFix malware lure: a fake 'Verification' page tells visitors to paste clipboard content into the Windows Run dialog, executing a hidden payload. Threat intel names the domain as iclickfix malware. Do not proceed.

Risk Factors (5)
ClickFix-style social engineering: instructs the user to open the Windows Run dialog and paste clipboard contents, executing a hidden command
Verified threat-intel report naming the primary domain as iclickfix malware infrastructure
Suspicious clipboard activity detected on the page
Brand borrowing: page copies Cloudflare's navigation and cookie-consent styling on an unrelated domain
Newly registered domain (8 days) with no reputation ranking
Domain age information unavailable

Details

Page Title

Cloudflare: Build for the agent eraother network

Scan Type

public

Domain Name Analysis

The domain name 'id-dns.net' uses the network infrastructure generic top-level domain (.net) with no subdomain. Its registrable label 'id-dns' stretches across 6 characters split between one vowel and four consonants; bonus characters include one hyphen. Word splitting yields two words: id, dns. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://id-dns.net/

Page Load Overview

0.36s
Total Load Time
842 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:532 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software71% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
71%
documentation technical
54%
adult content
50%
blog personal website
43%
government public service
43%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5104.16.123.96Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1103.101.85.146United Kingdom
AS199479Amtp LLC
1104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.110.97Google · CDNUnited States
AS15169Google LLC
1104.18.86.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.18.35.200Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
1185.15.59.240United States
AS14907Wikimedia Foundation Inc.
1511--

Detected Technologies3

JQueryv3.6.0
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14B75C9F5CD2241AE0A8FD1D3CC426089A76FF2D92713D6B8F05ED7242E4ADE6DB42446

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:oh1emB3lZMTefSB62N/I8blOXuqPJyfSB62N/I8blOXuqPJ5/pjqPrK+rIAToc:+1V3lSH/G

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1550234:jIAEcLABEeqoAQQI+wAnSQQy20obkoEELQGJASwMsAEaQGlOCyAZ+Y7J5ApMGIAxMAoMABpS0TkBC6IkApbEWRNCGKQBTNIo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:81818181818199ff
Perceptual Hash:ab36c13cc156c5d5
Difference Hash:4b233369333333cb
Wavelet Hash:ff8181818181bbff
Color Hash:#4c783a

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data