Security Scan Report: miit-s.com

Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 4 domains to perform 47 HTTP transactions. The main domain is miit-s.com and was registered 5 years ago.

Submitted URL: https://miit-s.com/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

ClickFix fake Cloudflare verification page instructing Win+X Terminal paste-and-run; vetted kit roster + hunting rule + 20 critical EtherHiding IDS alerts + malware-flagged domain. Do not interact.

Risk Factors (5)
Fake bot-verification overlay used as a lure to make users run attacker-supplied commands in Windows Terminal/PowerShell (ClickFix technique)
Instructions to paste and execute hidden clipboard content — leads to infostealer/malware execution
Critical IDS malware/exfiltration alerts (EtherHiding) attributed to the site's traffic
Primary domain flagged in threat intelligence as malware (iclickfix) and page loads a resource flagged as Vidar stealer infrastructure
Impersonation of Cloudflare's verification UI on a domain unrelated to Cloudflare
Domain age information unavailable

Details

Page Title

miit-s.com

Scan Type

public

Domain Name Analysis

You're looking at domain 'miit-s.com' on the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'miit-s' spans 6 characters split between two vowels and 3 consonants, plus one hyphen. Splitting it apart reveals three words: mi, it, s. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

miit-s.com trans-menu trans-contacts email@email.com 4123456789 trans-socials @oxd trans-newsletter

Page Load Overview

5.74s
Total Load Time
222 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:57%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:id
Text Length:1,036 chars
Detector Agreement:100%
Language mismatch: Declared as id but detected as en

Website Classification

Primary Category

technology software81% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
81%
documentation technical
58%
government public service
45%
social media network
39%
phishing scam
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12104.21.23.70Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.67.209.125Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
73.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
734.111.175.102Google · CDNKansas City, Missouri, United States
AS396982Google LLC
7172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
715.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
476--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T198936F25B71C80507E4B4B47918FBB0CE5387988C9240696FC7A62841DC9DFA79B3F6E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/j0ap/YC2UtWr0CtfGHdLEY/MJihoCcZCOud8G8tKS65wqsZCG+dM2cl6iCRotsN:/HddLEYWZTuYemlUYugqLAZTuNemlUYB

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:93789:ekmCCEACZQxDACjUDaURsSApEAo5IqIAABezJxGyEDAFJwqolDhiClW3ENyJDAALEi4ghMIwktSSBBGIDtpcBgJQSBlKQ2pB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000ffffffffff
Perceptual Hash:cc4c0ab3b3b3b1ac
Difference Hash:28a1340800000000
Wavelet Hash:00000000ffffffff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data