Security Scan: Checking if you are human

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b91d743f-5e82-4765-81a7-cfeac3d0ae2c Domain and IP registration (RDAP)/api/v1/rdap/b91d743f-5e82-4765-81a7-cfeac3d0ae2cHow often this domain was scanned/api/v1/domain/stats/yln.mfs.temporary.site Scan history for this domain/api/v1/domain/history/yln.mfs.temporary.site?limit=15

This website contacted 11 IPs in 2 countries across 6 domains to perform 8 HTTP transactions. The main domain is temporary.site and was registered 3 years 3 months ago.

Submitted URL: https://www.yln.mfs.temporary.site

The Cisco Umbrella rank of the primary domain is #244,706 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

ClickFix fake Cloudflare CAPTCHA that copies an msiexec command to the clipboard and tells visitors to run it via Win+R — confirmed malware delivery; never follow its steps.

Risk Factors (6)

Fake CAPTCHA 'I'm not a robot' lure instructing visitors to press Win+R, paste with Ctrl+V and press Enter (ClickFix social-engineering malware delivery)

Windows shell command using msiexec to fetch an installer from an external host, hidden in the page's own script

Clipboard manipulation actively injecting a shell command (clipboard_shell_injection)

Payload/infrastructure domain configservermu.net flagged as a malware loader by two independent threat feeds

Impersonation of Cloudflare's challenge UI on an unrelated host

Page content addressed at defeating automated review while coaching the victim through manual execution steps

Domain age information unavailable

Details

Page Title

Checking if you are human

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.yln.mfs.temporary.site' on the .site top-level domain; it also runs on subdomain 'www.yln.mfs'. Its registrable label 'temporary' stretches across 9 characters split between three vowels and 6 consonants. Breaking it apart gives 1 word: temporary. Median word length comes out to nine characters. No strong language cues emerged from the frequency lists.

Screenshot

© www.yln.mfs.temporary.site Verify you are human by completing the action below. I'm not a robot www.yln.mfs.temporary.site needs to review the security of your connection before proceeding. Ray...

Page Load Overview

2.36s

Total Load Time

140 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:730 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software58% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

58%

documentation technical

35%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	192.185.239.17	Phoenix, Arizona, United States	AS31898Oracle Corporation
0	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	195.154.239.25	Paris, Île-de-France, France	AS12876Scaleway SAS
0	142.251.156.119Google · CDN	United States	AS15169Google LLC
0	142.251.14.106Google · CDN	United States	AS15169Google LLC
0	195.154.239.27	Paris, Île-de-France, France	AS12876Scaleway SAS
0	142.251.150.119Google · CDN	United States	AS15169Google LLC
0	142.251.20.106Google · CDN	United States	AS15169Google LLC
0	142.251.151.119Google · CDN	United States	AS15169Google LLC
0	142.251.110.103Google · CDN	United States	AS15169Google LLC
8	11	-	-