Security Report: efs.au - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/877b4b7d-775e-4a4d-b70a-e779b3b360e4 Domain and IP registration (RDAP)/api/v1/rdap/877b4b7d-775e-4a4d-b70a-e779b3b360e4How often this domain was scanned/api/v1/domain/stats/efs.au Scan history for this domain/api/v1/domain/history/efs.au?limit=15

This website contacted 44 IPs in 2 countries across 29 domains to perform 191 HTTP transactions. The main domain is efs.au.

Submitted URL: https://efs.au/

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Compromised/malicious page running a ClickFix Win+X Terminal overlay and EtherHiding blockchain-based malware exfiltration (critical IDS + YARA hits) on a 1-day-old domain impersonating a real freight firm. Do not interact.

Risk Factors (4)

Fake Cloudflare 'Human Verification' / 'Authorize your browser' ClickFix overlay instructing Win+X → Terminal paste-and-run

EtherHiding malware exfiltration over blockchain RPC endpoints (critical IDS alerts)

Threat-intel-flagged third-party script hosts contacted by the page (browseid.codes, quiknode.pro)

Brand-new domain (1 day old) impersonating an established freight company's identity

Domain age information unavailable

Details

Page Title

Effective Freight Solutions - Easy Freight Management

Scan Type

public

Favicon Hash

MMH3: -1793865843

MD5: 6de670a94a24e808fdee51ac6ba3a494

Domain Name Analysis

You're looking at domain 'efs.au' on the Australian country-code top-level domain (.au). The registrable portion 'efs' spans 3 characters with one vowel and two consonants. Segmentation suggests 2 words: ef, s. Expect 1.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

35.41s

Total Load Time

4.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-AU

Text Length:5,152 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service57% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

57%

adult content

43%

corporate

35%

documentation technical

32%

news/blog

20%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
19	104.21.54.223Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.18.33.151Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.18.39.246Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.153.119Google · CDN	United States	AS15169Google LLC
4	142.251.20.97Google · CDN	United States	AS15169Google LLC
4	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
4	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.16.163.32Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.14.94Google · CDN	United States	AS15169Google LLC
4	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
191	44	-	-