Security Scan Report: cloudfiare-verification.net

Redirected to:
https://cloudfiare-verification.net/
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 2 domains to perform 5 HTTP transactions. The main domain is cloudfiare-verification.net and was registered 1 day ago.

Submitted URL: http://cloudfiare-verification.net

Effective URL:
https://cloudfiare-verification.net/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

ClickFix fake CAPTCHA impersonating Cloudflare; staged kits copy Windows/macOS shell commands to the clipboard for users to execute, leading to malware installation.

Risk Factors (6)
Fake CAPTCHA / ClickFix kit that instructs visitors to paste OS commands into Run or Terminal
Impersonation of Cloudflare verification UI on a non-Cloudflare domain
Known malicious kit roster match (two distinct ClickFix families)
Multiple critical high-precision hunting-rule patterns on the HTML body
Network IDS HIGH alert: ET DROP Spamhaus DROP traffic
Domain registered one day ago
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'cloudfiare-verification.net' on the network infrastructure generic top-level domain (.net) while skipping any subdomain. The second-level label 'cloudfiare-verification' is 23 characters long with 11 vowels and 11 consonants, notching one hyphen. Word splitting yields four words: cloud, fi, are, verification. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://cloudfiare-verification.net

Page Load Overview

0.25s
Total Load Time
210 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

technology software66% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
66%
documentation technical
43%
cryptocurrency blockchain
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3172.67.204.110Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1185.7.214.119Harlesden, England, United Kingdom
AS55286B2 Net Solutions Inc.
1104.21.85.97Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
53--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BF423C1BF4F21A32D3AA86B05577373C6B38892D8FC10CB59942676E074AEEB524508D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:apw2OU88hOnb6vaMbByrPl04LSQKTy5vLHvF9xO1Of96iJAfiNnr64D3GbMvabah:Ew2S80Mb0ZwP1XvaFUdJEUWocOH/0PAU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12717:gZSyMWRSgwMVBgwSZIAGAqgehEYAAABmQOACDBJCCASIR4MaIjwjDu4tOIJCXBLgA0IGwkDgAAcI1CNAKAAGKMwQJKCgDQRQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fcfcc6eefece7e00
Perceptual Hash:d1d744dd0ab33389
Difference Hash:0c3408083a1a8681
Wavelet Hash:fcfcc4fe2e023e00
Color Hash:07200030000

Other Hashes

Crop Resistant:0c3408083a1a8681

Scan History

Scan history not available

Unable to load historical scan data