Security Scan Report: api-dns.org

Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 2 countries across 7 domains to perform 15 HTTP transactions. The main domain is api-dns.org and was registered 5 days ago.

Submitted URL: https://api-dns.org

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake Cloudflare 'verify you are human' page that instead walks visitors through Win+R + Ctrl+V to execute a clipboard-injected payload — ClickFix malware lure on a 4-day-old domain.

Risk Factors (5)
Brand impersonation of Cloudflare on a non-Cloudflare domain
ClickFix social-engineering flow instructing Win+R + Ctrl+V execution of a pasted command
Malware-family threat-intel match on the primary domain, IP and URL
Domain registered 4 days ago, unranked in Cisco Umbrella
Clipboard manipulation detected by the scanner
Domain age information unavailable

Details

Page Title

Cloudflare: Build for the agent eraother network

Scan Type

public

Domain Name Analysis

Domain 'api-dns.org' uses the non-profit oriented generic top-level domain (.org) while skipping any subdomain. The core label 'api-dns' covers 7 characters holding 2 vowels versus 4 consonants, plus 1 hyphen. Segmentation suggests 2 words: api, dns. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://api-dns.org

Page Load Overview

2.75s
Total Load Time
827 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:532 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software70% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
70%
documentation technical
51%
adult content
47%
government public service
43%
blog personal website
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5103.101.85.187United Kingdom
AS199479Amtp LLC
1104.16.123.96Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.20.97Google · CDNUnited States
AS15169Google LLC
1104.18.87.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.18.35.200Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.250.154.95Google · CDNUnited States
AS15169Google LLC
1185.15.59.240United States
AS14907Wikimedia Foundation Inc.
1511--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T116051231170F796D66B888E1B12A6E087CE9A5BFB182C085FEC49354F0EFAD0DF49564

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:sYmCFqX+UQWErzbL7FtbnwEGS8DZNH5w2F3wW5/LcUR70NJ3wk5oGu8sO:LmHXfQWE7L77Z1N2F3wk6JToGu8sO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:825342:RgJitCogAEFkkxCA0RAsMUCESRCVCHkhMigIkEDNDqEHkhGgocjgFICcIshMKwoYKDxJIUFLEYWIqGxVAADAzCYgBOMleMCA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fecec6ce82deffe7
Perceptual Hash:b131c6cccfc72638
Difference Hash:001c1c183626000c
Wavelet Hash:fe8e868e809efcc0
Color Hash:07000030000

Other Hashes

Crop Resistant:001c1c183626000c

Scan History

Scan history not available

Unable to load historical scan data