Security Scan: Just a moment...

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c91504c3-98ab-4ba3-ac09-8296a9d07190 Domain and IP registration (RDAP)/api/v1/rdap/c91504c3-98ab-4ba3-ac09-8296a9d07190How often this domain was scanned/api/v1/domain/stats/foxnevs.com Scan history for this domain/api/v1/domain/history/foxnevs.com?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 1 HTTP transaction. The main domain is foxnevs.com and was registered 1 month ago.

Submitted URL: https://foxnevs.com/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake Cloudflare 'verify you are human' page that copies a cmd/curl MSI download to the clipboard and tells users to run it via Win+R — confirmed clickfix malware delivery.

Risk Factors (5)

Clipboard shell-command injection (pastejacking) staging an MSI payload download via curl

Brand impersonation of Cloudflare on a non-Cloudflare domain to add legitimacy

Social-engineering instructions to execute a Win+R paste command (clickfix malware pattern)

Linked domains reported as fakeapp malware by multiple threat-intel feeds

Very new domain (55 days) with no reputation and a generic 'Just a moment...' title

Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Domain Name Analysis

The domain 'foxnevs.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'foxnevs' stretches across 7 characters containing two vowels alongside five consonants. Segmentation suggests three words: fox, nev, s. Expect three characters per word on average. No strong language cues emerged from the frequency lists.