ScanMalware.com

Security Scan Report: refund-claim-blockfi.com

Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7aa99b91-e0ec-451e-87f8-a0ac097cabc6Domain and IP registration (RDAP)/api/v1/rdap/7aa99b91-e0ec-451e-87f8-a0ac097cabc6How often this domain was scanned/api/v1/domain/stats/refund-claim-blockfi.comScan history for this domain/api/v1/domain/history/refund-claim-blockfi.com?limit=15
This website contacted 4 IPs in 1 country across 2 domains to perform 11 HTTP transactions. The main domain is refund-claim-blockfi.com and was registered 9 months ago.

Submitted URL: https://refund-claim-blockfi.com/

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

High-risk brand-impersonation domain: refund-claim-blockfi.com uses the BlockFi name and a refund lure, has a single-source phishing report, and hides its real content behind a bot challenge.

Risk Factors (4)
Deceptive hostname appearing to impersonate BlockFi with a refund-claim theme
Primary domain reported as phishing by a threat-intelligence source
Circular redirect detected
Real page content hidden behind a bot-protection challenge, preventing verification of forms or credential handling
Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Domain Name Analysis

Domain 'refund-claim-blockfi.com' uses the commercial generic top-level domain (.com) without a subdomain. The core label 'refund-claim-blockfi' covers 20 characters split between six vowels and 12 consonants, notching 2 hyphens. Segmentation suggests 4 words: refund, claim, block, fi. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://refund-claim-blockfi.com/

Page Load Overview

19.96s
Total Load Time
2.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:402 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software76% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
76%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
114--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T117130930FE18313AB421C99DA891B7586136FFD95E6013AFE556B27C0F8B35428627C7

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:zmZ8JiFOdWt9QrkzTgG9fXAgciIJdNJQNdzvZm:29AkzTggCzQN1Zm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:44739:4EG9ux2AQOVoEoAAqAqAUEoIDGAEFGUyEDHQjAoxMAEJLGQDpBGEx2A0c22kyJgwNgwgliAYEsOD+hU7AIHKcSTACVAVQLW0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c3cbffffffffe7
Perceptual Hash:b03032cfc6cdcecc
Difference Hash:089e16100000000c
Wavelet Hash:3c0000303c3c3c00
Color Hash:#5e862d

Other Hashes

Crop Resistant:089e16100000000c

Scan History

Scan history not available

Unable to load historical scan data