ScanMalware.com

Security Scan Report: gfrg.zafmvuvfjhyu.sa.com

Submitted: Dec 26, 2025, 9:18:23 AMCompleted: Dec 26, 2025, 9:18:38 AMpublicerror

Error: Scan blocked by bot protection: cloudflare (ray id)

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/95c87884-6810-4e7e-9bff-e33170997587Domain and IP registration (RDAP)/api/v1/rdap/95c87884-6810-4e7e-9bff-e33170997587Certificate Transparency/api/v1/ct/gfrg.zafmvuvfjhyu.sa.comHow often this domain was scanned/api/v1/domain/stats/gfrg.zafmvuvfjhyu.sa.comScan history for this domain/api/v1/domain/history/gfrg.zafmvuvfjhyu.sa.com?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 12 HTTP transactions. The main domain is gfrg.zafmvuvfjhyu.sa.com.

Submitted URL: https://gfrg.zafmvuvfjhyu.sa.com/cllascio.php?342D363837343734373037333341324632463646373737373731363437393734363337393636363637383739363737313641373437343634364332453733373537303631363236313733363532453633364632463636373536453633373436393646364537333246373633313246363336433646363136423244373236353634363937323635363337343346363333443334333936333334333333353633333232443631333633333339324433343331333033333244333836333337333332443336333033323632333333363332363633323333333833302D242323656D61696C2323

AI Security Verdict

AI analysis unavailable due to scan error

Details

Page Title

Suspected phishing site | Cloudflare

Scan Type

public

Domain Name Analysis

The domain name 'gfrg.zafmvuvfjhyu.sa.com' uses the commercial generic top-level domain (.com) and includes subdomain 'gfrg.zafmvuvfjhyu'. The second-level label 'sa' is 2 characters long with one vowel and 1 consonant. Breaking it apart gives 2 words: s, a. Median word length is one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://gfrg.zafmvuvfjhyu.sa.com/cllascio.php?342D363837343734373037333341324632463646373737373731363437393734363337393636363637383739363737313641373437343634364332453733373537303631363236313733363532453633364632463636373536453633373436393646364537333246373633313246363336433646363136423244373236353634363937323635363337343346363333443334333936333334333333353633333232443631333633333339324433343331333033333244333836333337333332443336333033323632333333363332363633323333333833302D242323656D61696C2323

Page Load Overview

0.97s
Total Load Time
283 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:395 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam85% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

phishing scam
85%
technology software
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.21.53.192United States
AS13335CLOUDFLARENET
3172.67.217.242United States
AS13335CLOUDFLARENET
3104.18.95.41United States
AS13335CLOUDFLARENET
3104.18.94.41United States
AS13335CLOUDFLARENET
124--

Scan History

Scan history not available

Unable to load historical scan data