Security Scan Report: starvibecentral.com

Submitted: Completed: publiccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised celebrity-gossip site serving the ClearFake/EtherHiding ClickFix lure: a fake Cloudflare check tells Windows users to paste a Terminal command, with IDS-confirmed malware exfiltration.

Risk Factors (6)
Known malicious ClickFix kit confirmed by analyst-vetted roster and YARA rule
19 CRITICAL IDS alerts for EtherHiding command-and-control/exfiltration
Primary scanned domain flagged as ClearFake malware by two independent threat-intel feeds
Fake Cloudflare bot-verification overlay (Ray ID, 'Performance and Security by Cloudflare') with PowerShell/Terminal paste instructions
Blockchain RPC connections to BSC testnet nodes consistent with EtherHiding payload delivery
Seven eval() calls indicating runtime-generated code
Domain age information unavailable

Details

Page Title

Star Vibe Central

Scan Type

public

Domain Name Analysis

Domain 'starvibecentral.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'starvibecentral' is 15 characters long with five vowels and 10 consonants. Segmentation suggests 3 words: star, vibe, central. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://starvibecentral.com

Page Load Overview

1.35s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,629 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software75% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
75%
documentation technical
57%
government public service
44%
phishing scam
30%
adult content
29%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7104.21.56.186Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.110.97Google · CDNUnited States
AS15169Google LLC
4142.251.13.155Google · CDNUnited States
AS15169Google LLC
4104.16.57.10Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4216.239.34.36Google · CDNUnited States
AS15169Google LLC
4142.251.14.157Google · CDNUnited States
AS15169Google LLC
4142.251.110.132Google · CDNUnited States
AS15169Google LLC
4172.67.155.74Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.250.154.97Google · CDNUnited States
AS15169Google LLC
4192.178.183.157Google · CDNUnited States
AS15169Google LLC
9924--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BA73F8B2E45440B73A2F47FDD29A725CA5A6EA05CB0F62A5F1FE419842C0AF3C95331D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:+sCwid+BxcdXHsSoxKezOypC8fKyW1ppYdK8fvl/Ggfml3SEPi/pgkJ9G0gQMpW2:+sznxARxoG2UAA0F9Sy+T

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:76820:hQQMoFIaErMAAEuhyQIhwjB8SAIEAAQJCEQ6VUEFMDDOgRABBfQSpgDIABWHcEAPaa1ng0kSIAoJIACgPGjHIQCOJpcBQgRh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data