Security Scan: Checking if you are human

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8bbb284c-bf8e-421c-87ca-ac05a07a3e4c Domain and IP registration (RDAP)/api/v1/rdap/8bbb284c-bf8e-421c-87ca-ac05a07a3e4cHow often this domain was scanned/api/v1/domain/stats/eesa.surf Scan history for this domain/api/v1/domain/history/eesa.surf?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is eesa.surf and was registered 5 years ago.

Submitted URL: https://eesa.surf

Effective URL:

https://eesa.surf/?__cf_chl_tk=4sC_CvOkfgdtcvNIf9iOFoGan6T3EE7NqSo-wuY...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Confirmed ClickFix FakeCAPTCHA page impersonating Cloudflare that tricks users into pasting and executing a LOLBin command via Windows Run dialog; analyst-vetted malicious kit plus malware loader IoC.

Risk Factors (6)

Known ClickFix FakeCAPTCHA phishing kit detected on the page (LOLBin variant)

Brand impersonation of Cloudflare's human-verification / Turnstile interface

Fake-CAPTCHA flow instructs victims to run a clipboard-pasted command via Windows Key + R (execute arbitrary code / LOLBin abuse)

Primary domain flagged as an unknown malware loader in threat intelligence

High-severity IDS alerts on *.surf domain traffic

Zero legitimate business content — page exists solely to deliver the fake-CAPTCHA execution prompt

Domain age information unavailable

Details

Page Title

Checking if you are human

Scan Type

public

Domain Name Analysis

You're looking at domain 'eesa.surf' on the .surf top-level domain with no subdomain. Its registrable label 'eesa' stretches across 4 characters holding three vowels versus one consonant. Breaking it apart gives two words: ees, a. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.36s

Total Load Time

47 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:675 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software51% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

51%

documentation technical

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	145.239.37.162	Paris, Île-de-France, France	AS16276OVH SAS
2	1	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1074468A3A78807A9A6944CD952087617A4F2C07B3C1E2288FAF67653F73ED51FC25770

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:vCRENkbBM//O1wiFPyPWRz0JfAlcyx06+hL5eb5ECGqgEYACzv5eT5/X4cRAeSwD:3W8rRuXW2SX3mHa0+6L0Y1h36NoP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:265528:UiAAMBTDEaJ64KEQVJyMAgKKEQoRw9CgSSEEDiEOIEKFAIBCCF2IAwEEi1hOkdUARIQ8WROiAZZABCQox2JE5cDAcLh4GBVM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cf83f7ffffffffe7

Perceptual Hash:b0383089c7cfc7c7

Difference Hash:189e24000000100c

Wavelet Hash:3f030f0ff0f0f0c0

Color Hash:#53ac6b

Other Hashes

Crop Resistant:189e24000000100c

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: eesa.surf