Security Scan: Safer Yalla

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4622e987-4203-4c3f-a68a-30fb04a685e3 Domain and IP registration (RDAP)/api/v1/rdap/4622e987-4203-4c3f-a68a-30fb04a685e3How often this domain was scanned/api/v1/domain/stats/saferyalla.com Scan history for this domain/api/v1/domain/history/saferyalla.com?limit=15

This website contacted 13 IPs in 1 country across 12 domains to perform 46 HTTP transactions. The main domain is saferyalla.com and was registered 5 years ago.

Submitted URL: https://saferyalla.com/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised site serving a ClickFix kit: fake Cloudflare verification overlay telling Windows users to paste a command into PowerShell/Terminal, plus EtherHiding C2 IDS alerts and two-feed malware Indicators of Compromise. Do not follow its instructions.

Risk Factors (5)

Known malicious ClickFix (Win+R/Win+X Terminal) social-engineering kit injected into the page

Fake Cloudflare-style 'human verification' overlay with fabricated Ray ID used to lend credibility to the Terminal paste step

19 CRITICAL 'ET MALWARE EtherHiding Exfil M2' IDS alerts indicating malicious blockchain-based C2 traffic

Multi-feed Indicators of Compromise on the primary domain and URL ('iclickfix' / unknown malware)

Page presents itself as a Cloudflare security check it is not (brand impersonation)

Domain age information unavailable

Details

Page Title

Safer Yalla

Scan Type

public

Favicon Hash

MMH3: -1621718384

MD5: 008baaa683f9b084bd68b1f2251e69bf

Domain Name Analysis

You're looking at domain 'saferyalla.com' on the commercial generic top-level domain (.com). The registrable portion 'saferyalla' spans 10 characters containing four vowels alongside 6 consonants. Segmentation suggests three words: safer, yall, a. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

SAFER YALLA PACK YOUR BAGS! Website is Launching Soon ( Enter Your Email Address GET NOTIFIED

Page Load Overview

1.00s

Total Load Time

2.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:54%

Script:Latin

Direction:ltr

Detection Details

Text Length:1,039 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software81% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

81%

healthcare medical

64%

documentation technical

61%

phishing scam

38%

government public service

37%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.20.95Google · CDN	United States	AS15169Google LLC
3	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	52.223.48.152Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
3	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
46	13	-	-