Security Scan: Default Web Site Page

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6ed1bd6f-2cd4-44db-824a-b5ba5a1aa998 Domain and IP registration (RDAP)/api/v1/rdap/6ed1bd6f-2cd4-44db-824a-b5ba5a1aa998How often this domain was scanned/api/v1/domain/stats/brainsurface.com Scan history for this domain/api/v1/domain/history/brainsurface.com?limit=15

This website contacted 6 IPs in 1 country across 4 domains to perform 44 HTTP transactions. The main domain is brainsurface.com and was registered 17 years ago.

Submitted URL: https://brainsurface.com

Effective URL:

https://brainsurface.com/cgi-sys/defaultwebpage.cgi

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised 17-year-old domain serving a ClickFix 'fake Cloudflare' verification overlay that tells Windows users to open Terminal and paste attacker commands; high-precision hunting rule, vetted kit roster and 19 critical malware IDS alerts confirm malicious activity. Never follow its instructions.

Risk Factors (5)

ClickFix Win+X / paste-into-Terminal social-engineering lure driving users to execute arbitrary commands

Fake Cloudflare bot-verification overlay and Ray ID on a non-Cloudflare domain

Critical network IDS malware alerts for EtherHiding exfiltration (19 sightings)

Multi-source threat-intelligence malware attribution for the primary domain

Third-party resource on BNB Chain testnet infrastructure flagged as Vidar malware loader

Domain age information unavailable

Details

Page Title

Default Web Site Page

Scan Type

public

Domain Name Analysis

The domain 'brainsurface.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 12 characters in 'brainsurface' containing five vowels alongside seven consonants. Splitting it apart reveals 2 words: brain, surface. The median word length lands at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

If you are the owner of this website, please contact your hosting provider: webmaster The IP address has changed. The IP address for this domain may have changed recently. Check your DNS settings to...

Page Load Overview

3.01s

Total Load Time

91 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:57%

Script:Latin

Direction:ltr

Detection Details

Text Length:1,843 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical59% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

59%

technology software

57%

phishing scam

42%

blog personal website

39%

adult content

29%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	104.21.11.102Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	172.67.148.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
7	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
7	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
7	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
44	6	-	-