Security Report: kaprychozas.rf.gd - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/da84b56d-6cd4-4dbe-8def-2c85a38e013b Domain and IP registration (RDAP)/api/v1/rdap/da84b56d-6cd4-4dbe-8def-2c85a38e013bHow often this domain was scanned/api/v1/domain/stats/kaprychozas.rf.gd Scan history for this domain/api/v1/domain/history/kaprychozas.rf.gd?limit=15

This website contacted 16 IPs in 2 countries across 12 domains to perform 42 HTTP transactions. The main domain is rf.gd and was registered 13 years ago.

Submitted URL: https://kaprychozas.rf.gd

Effective URL:

https://kaprychozas.rf.gd/?i=1

Redirected

The Cisco Umbrella rank of the primary domain is #334,284 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

ClearFake-style malware distribution: free rf.gd subdomain used as an SEO-spam doorway that loads two multi-feed malware domains and triggers CRITICAL EtherHiding exfiltration IDS alerts. Do not visit.

Risk Factors (5)

Two multi-source content-malware Indicators of Compromise on resources loaded by this page (ClearFake exploit kit, macOS infostealer)

Nine CRITICAL IDS malware alerts for EtherHiding exfiltration

Primary domain reported as a ClearFake distribution host

SEO-spam doorway content with gambling/casino keyword stuffing and outbound links to unrelated betting sites

Free instant-subdomain hosting with no accountability for the content

Domain age information unavailable

Details

Page Title

Página no encontrada – Varasol

Scan Type

public

Favicon Hash

MMH3: -1726461665

MD5: 11356782241b2f76dffacbf738b25267

Domain Name Analysis

You're looking at domain 'kaprychozas.rf.gd' on the .gd country-code top-level domain, featuring subdomain 'kaprychozas'. The core label 'rf' covers 2 characters holding zero vowels versus two consonants. Breaking it apart gives 1 word: rf. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

10.05s

Total Load Time

614 KB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:2,387 chars

Detector Agreement:33%

Website Classification

Primary Category

gambling betting88% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

88%

entertainment media

84%

technology software

83%

cryptocurrency blockchain

74%

e-commerce shopping

68%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	185.27.134.219	United Kingdom	AS34119Wildcard UK Limited
2	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	192.178.183.95Google · CDN	United States	AS15169Google LLC
2	104.26.4.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.127.94Google · CDN	United States	AS15169Google LLC
2	172.67.185.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
42	16	-	-