Security Scan: Loading

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6e1b662e-433f-46db-8c9e-a0fc910155f8 Domain and IP registration (RDAP)/api/v1/rdap/6e1b662e-433f-46db-8c9e-a0fc910155f8How often this domain was scanned/api/v1/domain/stats/claimsme.cfd Scan history for this domain/api/v1/domain/history/claimsme.cfd?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is claimsme.cfd and was registered 1 month ago.

Submitted URL: https://claimsme.cfd/

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Shape-order captcha gate matching an analyst-vetted Fortnite 'locker value' phishing kit that leads to a fake Epic Games login for account takeover. Obfuscated JS, 18-day-old domain, Spamhaus IDS alert.

Risk Factors (5)

Known phishing kit identified by analyst-vetted roster (critical severity)

Shape-order captcha gate used by the Fortnite/Epic account-takeover kit

Obfuscated inline JavaScript with encoding/decoding functions

Very new domain (18 days) on a .cfd TLD

Network IDS HIGH alert for Spamhaus DROP-listed traffic

Domain age information unavailable

Details

Page Title

Scan Type

public

Domain Name Analysis

You're looking at domain 'claimsme.cfd' on the .cfd top-level domain while skipping any subdomain. The second-level label 'claimsme' is 8 characters long containing 3 vowels alongside five consonants. It segments into two words: claims, me. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.64s

Total Load Time

688 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:242 chars

Detector Agreement:100%

Website Classification

Primary Category

phishing/scam40% confidence

Type: static

Method: structural

All Detected Categories

phishing/scam

40%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	109.238.86.76	Erith, England, United Kingdom	AS201738Ufo Technologies Limited
2	1	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T141C5979639A1B55E00478B31364E57FA58AFC505CACFA049F88CADADF0ECEB2255C7C4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:N9KcQeqNvkA2ygs2H4mt7Zk+PYpxuZ4Q506QwWc4+pMA3ZzUaavyVD0JrlytxKzp:PvQeqNhP9mt7G8YKZiS4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2708701:QAUwAJE+yFiABlHENEkooyADeRRQGkJIsgiFeYwAgKRFAaIEIaByoiNACZhCAQEASF0EL4IiAIILQFgK/bSjAA1iiCkycBTB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0119191919191901

Perceptual Hash:88dd33cccc3333c6

Difference Hash:01b1b1b3b3b131a1

Wavelet Hash:0119597f7f7b1901

Color Hash:#ac9753

Other Hashes

Crop Resistant:01b1b3b3b3b131a1

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: claimsme.cfd