Security Scan: Just a moment...

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a8744044-6333-41c2-96ec-79cb53ff263c Domain and IP registration (RDAP)/api/v1/rdap/a8744044-6333-41c2-96ec-79cb53ff263cHow often this domain was scanned/api/v1/domain/stats/foxnevs.com Scan history for this domain/api/v1/domain/history/foxnevs.com?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 1 HTTP transaction. The main domain is foxnevs.com and was registered 1 month ago.

Submitted URL: https://foxnevs.com/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake Cloudflare 'verify you are human' ClickFix page that copies a Windows cmd dropper to the clipboard and links to domains flagged as fakeapp malware. Never paste, never run — textbook malware delivery.

Risk Factors (8)

Fake Cloudflare / 'human verification' clickfix page impersonating Cloudflare branding

Clipboard shell injection: Windows 'cmd /c' command copied for the victim to paste into Win+R

Dropper script string downloading an MSI installer to %TEMP%

Page links to domains flagged by two feeds as fakeapp malware

Brand impersonation of Cloudflare on an unrelated, 46-day-old unranked domain

Title/OCR content unrelated to foxnevs.com (title-domain mismatch)

Obfuscated challenge form fields (jschl_vc, pass, jschl_answer) used as a social-engineering veil

Primary domain reported in threat intel as 'known attacker'

Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Domain Name Analysis

You're looking at domain 'foxnevs.com' on the commercial generic top-level domain (.com) and has no subdomain. The core label 'foxnevs' covers 7 characters split between two vowels and 5 consonants. Segmentation suggests three words: fox, nev, s. Median word length is three characters. No strong language cues emerged from the frequency lists.