Security Scan Report: unofficialffi.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 5 domains to perform 31 HTTP transactions. The main domain is unofficialffi.com and was registered 4 years 8 months ago.

Submitted URL: https://unofficialffi.com

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Active ClickFix/EtherHiding malware page: fake Cloudflare 'Human Verification' overlay tricks Windows users into pasting attacker commands into Terminal; critical IDS malware/exploit-kit alerts and kit-roster match confirm compromise.

Risk Factors (6)
Deployed ClickFix / 'fake Cloudflare verification' social-engineering kit that induces visitors to paste attacker-supplied commands into a terminal
EtherHiding: blockchain smart-contract-based payload staging to resist takedown, with obfuscated scripts hiding threat-feed RPC hosts
Critical IDS malware and exploit-kit alerts tied to this page's traffic
Loads additional flagged domains (exploit-kit host triapfog.com, ClickFix CDN codes.browse-cdn.beer)
Brand impersonation of Cloudflare's verification UI on a domain unrelated to Cloudflare
Primary domain has active malicious-loader threat-intelligence reports and no reputation ranking
Domain age information unavailable

Details

Page Title

UnofficialFFI

Scan Type

public

Domain Name Analysis

The domain 'unofficialffi.com' uses the commercial generic top-level domain (.com) and has no subdomain. The core label 'unofficialffi' covers 13 characters holding 6 vowels versus 7 consonants. Word splitting yields 3 words: unofficial, ff, i. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://unofficialffi.com

Page Load Overview

23.20s
Total Load Time
10.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:731 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software48% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
48%
cryptocurrency blockchain
47%
e-commerce shopping
42%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7162.241.194.174Ashburn, Virginia, United States
AS31898Oracle Corporation
6142.250.154.95Google · CDNUnited States
AS15169Google LLC
6172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
62.27.5.107United States
AS202226Great Flower
6104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
315--

Detected Technologies3

WordPressv7.1.4
100%
JQueryv3.7.1
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15DD3F871B7A0207A253B8BBEE196B61C217DD553EE0E16E5F0FD811A85CAF93207270D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:p+nAlVr+0aa+gmypMO+o163URTw9rVWhJjWFKP3bKIKRQPcU4kuujmH:pD+0aa+gfGWhJjWFKP3bhKWcujo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:141621:gCAMGIBGI4MCZEqYDCSwLUCOGDQoHhMIZo9iACMLGRSKISjSaSCwhCDAEJiiojDsYIZoGbEouMABALAKjW4GFUmWEBlIYBGA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffe7e7e7e7e7ef
Perceptual Hash:b38dcc323333cc33
Difference Hash:c8004c4d4d4d4d08
Wavelet Hash:0e8f040400000000
Color Hash:#8ed279

Scan History

Scan history not available

Unable to load historical scan data