Security Scan: https://bieffe.org/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/700b293d-82e5-4c01-863d-4667597f89bf Domain and IP registration (RDAP)/api/v1/rdap/700b293d-82e5-4c01-863d-4667597f89bfHow often this domain was scanned/api/v1/domain/stats/bieffe.org Scan history for this domain/api/v1/domain/history/bieffe.org?limit=15

This website contacted 8 IPs in 2 countries across 7 domains to perform 10 HTTP transactions. The main domain is bieffe.org and was registered 10 years ago.

Submitted URL: https://bieffe.org/

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Compromised page serves a fake Cloudflare ClickFix overlay that tricks Windows users into running malicious PowerShell commands; confirmed by YARA, IDS, and threat-intel. Avoid interaction.

Risk Factors (5)

Known malicious ClickFix overlay kit injected into page

Fake Cloudflare verification impersonation

Social engineering instructs users to execute PowerShell commands via clipboard paste

Critical IDS alerts for EtherHiding exfiltration

Blockchain RPC connections suggesting wallet-drainer or exfiltration behavior

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Favicon Hash

MMH3: 2095613928

MD5: 0a92b324a4725610d40f4571a0363296

Domain Name Analysis

Domain 'bieffe.org' uses the non-profit oriented generic top-level domain (.org) with no subdomain. The second-level label 'bieffe' is 6 characters long containing three vowels alongside three consonants. Word splitting yields 2 words: bie, ffe. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.90s

Total Load Time

42 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

Text Length:639 chars

Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain45% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

45%

technology software

44%

documentation technical

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	142.132.190.228	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
1	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	193.32.220.134	Frankfurt am Main, Hesse, Germany	AS48314IP-Projects GmbH & Co. KG
1	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
1	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
1	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	193.32.220.133	Frankfurt am Main, Hesse, Germany	AS48314IP-Projects GmbH & Co. KG
10	8	-	-