Security Report: varnixboya.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7542aba3-905d-4bcb-963d-13241bea8272 Domain and IP registration (RDAP)/api/v1/rdap/7542aba3-905d-4bcb-963d-13241bea8272How often this domain was scanned/api/v1/domain/stats/varnixboya.com Scan history for this domain/api/v1/domain/history/varnixboya.com?limit=15

This website contacted 6 IPs in 1 country across 4 domains to perform 40 HTTP transactions. The main domain is varnixboya.com and was registered 1 year 12 months ago.

Submitted URL: https://varnixboya.com/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

ClickFix page impersonating a Cloudflare verification prompt and telling Windows users to paste commands into Terminal. Analyst-vetted kit, HIGH YARA hit, 19 critical EtherHiding malware IDS alerts, and multi-feed malware reputation for the domain. Avoid interaction.

Risk Factors (5)

Known ClickFix social-engineering kit (Win+X / paste-into-Terminal lure) present on the page

Impersonates Cloudflare's bot-verification / error-page branding on a non-Cloudflare domain

Instructs visitors to paste and execute copied commands in a terminal — direct malware delivery vector

CRITICAL IDS alerts for ET MALWARE EtherHiding Exfil M2 indicating C2/exfiltration activity

Multi-source threat-intel malware classification of the primary domain and URL

Domain age information unavailable

Details

Page Title

varnixboya.com | 526: Invalid SSL certificate

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'varnixboya.com' is registered and has no subdomain. The second-level label 'varnixboya' is 10 characters long containing 4 vowels alongside six consonants. Word splitting yields 4 words: var, nix, boy, a. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.89s

Total Load Time

87 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,846 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software51% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

51%

documentation technical

36%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	104.21.5.40Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	172.67.132.240Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
6	172.67.142.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
40	6	-	-