Security Scan Report: ondrivee.pxxlspace.cv

Submitted: Oct 12, 2026, 10:25:09 AMCompleted: Oct 12, 2026, 10:25:45 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Fake 'Human Verification' captcha page with a Telegram bot token in its scripts, exfiltrating visitor data (including IP) to an operator-controlled chat. No credential form found, but the built-in exfiltration channel and disposable unranked domain make it unsafe.

Risk Factors (5)
Telegram bot token embedded in page script — built-in data exfiltration to a private chat
Fake CAPTCHA / 'Human Verification' social-engineering gate with no real verification service
Visitor IP harvested via ipify cross-origin request
Unranked domain (not in Cisco Umbrella top 1M) on a suspicious multi-part subdomain
Domain only 118 days old
Domain age information unavailable

Details

Page Title

Human Verification

Scan Type

public

Domain Name Analysis

Domain 'ondrivee.pxxlspace.cv' uses the .cv country-code top-level domain; it also runs on subdomain 'ondrivee'. The core label 'pxxlspace' covers 9 characters holding two vowels versus seven consonants. Splitting it apart reveals three words: px, xl, space. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ondrivee.pxxlspace.cv/

Page Load Overview

0.74s
Total Load Time
133 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:274 chars
Detector Agreement:50%

Website Classification

Primary Category

healthcare medical75% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
75%
entertainment media
71%
government public service
70%
documentation technical
65%
news media journalism
56%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1173.231.16.77United States
AS18450WebNX, Inc.
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1149.154.166.110Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
95--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16542957B72A210212653A2AA3AA7D7C535219003B40DE6257EED7594CFCEF80E4F739D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:es1E6BtGZyVqx8LAl3H6Nn8nuTLc8U52vUQUXU8U7UyUiRr4zHGYmIDy2BsIOIJV:eszd4v/7IBZnLSSH35FLtqh5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12517:gxBxTwMYwBcIgABWBARDM9GyICuIfwZIAMEqLJDpmIAIgAxKFogAIxsIo2wQE3ohREICQFCLtg4hwpgGNIAPUAURoGASgiQi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0008181818181800
Perceptual Hash:9933666666ccc699
Difference Hash:245a123230323208
Wavelet Hash:e0e8d8d8d8d8f8f0
Color Hash:#77862d

Other Hashes

Crop Resistant:245a123230323208

Scan History

Scan history not available

Unable to load historical scan data