ScanMalware.com

Security Scan Report: cloudflare.bz

Site favicon
Submitted: Oct 11, 2026, 4:00:47 PMCompleted: Oct 11, 2026, 4:01:20 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Fake Cloudflare 'Verify you are human' page on the 1-day-old lookalike domain cloudflare.bz (Cyrillic-homoglyph title), whose scripts beacon to a domain reported by 3 feeds as a powershell injector. Brand impersonation plus malware-linked traffic — avoid interacting.

Risk Factors (5)
Brand impersonation of Cloudflare on a domain that is not Cloudflare's official domain (Cyrillic homoglyph 'Сloudflare' in title).
Domain registered ≤1 day ago and unranked (weak prior, but part of the impersonation pattern).
Page scripts send data via sendBeacon to cosmical2049.com, a domain flagged as a powershell injector by multiple threat-intel feeds.
HIGH-severity IDS alert triggered during the scan.
Fake 'Verify you are human' overlay on a lookalike hostname — a common phishing/redirect lure.
Domain age information unavailable

Details

Page Title

Сloudflare

Scan Type

public

Domain Name Analysis

Domain 'cloudflare.bz' uses the Belizean country-code top-level domain (.bz) without a subdomain. The second-level label 'cloudflare' is 10 characters long containing 4 vowels alongside 6 consonants. Breaking it apart gives two words: cloud, flare. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cloudflare.bz

Page Load Overview

0.35s
Total Load Time
193 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:10 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4147.45.61.63Amsterdam, North Holland, Netherlands
AS209207Digital Hosting Provider LLC
0193.233.126.164Amsterdam, North Holland, Netherlands
AS209207Digital Hosting Provider LLC
0104.26.6.93Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0195.58.146.210Denmark
AS9009M247 Europe SRL
0104.26.7.93Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
45--

Detected Technologies2

Meta-Refresh-Redirect
100%
reCAPTCHA
45%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19B51A679FDC12222125761BC21DBFB5C776BB22395414800FA4CE0611FE0BAAD4A3BCC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:bVIF/f7ndkFOdcMJyHCScuUUCbbj6TeR4kUIFbUt1:ZIFX7d5aMAeJb6BOUD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2659:EAEAMAAkAgAAIIAIAAAAABAAIQAACAAAAgAAAgQAEAIQEAAGAISAACCAQAAAgEBAAEAAQAAkIQAQAEAASQQAAAAAkBAAAAAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffcfc7c7cfffff
Perceptual Hash:b131cece333199c9
Difference Hash:0000181c18100000
Wavelet Hash:ffffcfc700000000
Color Hash:#e06c6c

Other Hashes

Crop Resistant:0000181c18100000

Scan History

Scan history not available

Unable to load historical scan data