Security Scan Report: baiifa.com

Submitted: Oct 12, 2026, 12:23:53 AMCompleted: Oct 12, 2026, 12:24:28 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Confirmed ClickFix malware page: fake Cloudflare bot check plus Win+X/Terminal paste instructions, 19 CRITICAL EtherHiding IDS alerts, and a multi-feed malware report on the primary domain. Never run the pasted command.

Risk Factors (6)
Known malicious ClickFix / fake-verification kit injected into the page (Win+X → Terminal → paste command)
19 CRITICAL IDS alerts for EtherHiding malware exfiltration
Multi-source threat-intel malware report on the primary domain (clearfake)
Impersonation of Cloudflare's bot-verification UI on a non-Cloudflare domain
Third-party script host flagged for Vidar malware
Social-engineering instructions that lead visitors to run attacker-supplied commands with administrative privileges
Domain age information unavailable

Details

Page Title

Parker Test page

Scan Type

public

Domain Name Analysis

The domain name 'baiifa.com' uses the commercial generic top-level domain (.com). Count 6 characters in 'baiifa' with 4 vowels and two consonants. Breaking it apart gives three words: bai, if, a. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://baiifa.com

Page Load Overview

0.96s
Total Load Time
59 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:53%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,040 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software81% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
81%
documentation technical
59%
government public service
39%
phishing scam
36%
adult content
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10104.21.34.17Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
53.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5172.67.153.45Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
534.111.175.102Google · CDNKansas City, Missouri, United States
AS396982Google LLC
5172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
515.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
356--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AB5188BB35A7D00617322BFA24967208D113BD5CD9CE94A5F0BD0B42A522BFE9013F98

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:qGjpt9H68sJKEKp2bVo3EvcclHMMwMEN5I+a4USS7TSp1dOe1XLr9EM8l2D:1a8sJM4UEkclsMwMEN5rUSS3Sp1dO2Xv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2717:AAABCAACCEAAAYBgAZAAiAUAAAQAAAAAQAgAAAAIAGAFCINIAAAIAEQAQBgAAAsEA0QQAgJyAAQAAhACAAGAAIIC0QIgABAC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffffffffffffff
Perceptual Hash:870f0f0f0f0f0f0f
Difference Hash:e000000000000000
Wavelet Hash:10f0f0f0f0f0f0f0
Color Hash:#e06c6c

Other Hashes

Crop Resistant:e000000000000000

Scan History

Scan history not available

Unable to load historical scan data