Security Scan: Default Web Site Page

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/de9c225f-232c-4bc3-988c-a865c1c1b944 Domain and IP registration (RDAP)/api/v1/rdap/de9c225f-232c-4bc3-988c-a865c1c1b944How often this domain was scanned/api/v1/domain/stats/admission.qaed.pk Scan history for this domain/api/v1/domain/history/admission.qaed.pk?limit=15

This website contacted 9 IPs in 2 countries across 6 domains to perform 62 HTTP transactions. The main domain is qaed.pk and was registered 5 years ago.

Submitted URL: https://admission.qaed.pk

Effective URL:

https://admission.qaed.pk/cgi-sys/defaultwebpage.cgi

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Compromised site serving a fake Cloudflare 'verify you are human' ClickFix lure that copies a PowerShell command to the clipboard for the victim to paste and run. Confirmed malware delivery.

Risk Factors (6)

Fake 'human verification' overlay used to deliver a clipboard-pasted PowerShell/terminal command

Known ClickFix Windows kit identified by analyst-vetted roster and YARA

Critical network IDS alerts for EtherHiding exfiltration (20 hits)

Threat-intel ClearFake association on the primary domain

Brand impersonation of Cloudflare security verification without authorization

Six cross-domain redirects ending on a cPanel default page (compromised/defaced hosting)

Domain age information unavailable

Details

Page Title

Default Web Site Page

Scan Type

public

Domain Name Analysis

The domain 'admission.qaed.pk' uses the Pakistani country-code top-level domain (.pk) with subdomain 'admission'. Count 4 characters in 'qaed' containing 2 vowels alongside two consonants. Breaking it apart gives two words: qa, ed. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.08s

Total Load Time

164 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:57%

Script:Latin

Direction:ltr

Detection Details

Text Length:1,846 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical49% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

49%

technology software

47%

phishing scam

32%

blog personal website

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	104.21.95.39Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	172.67.142.196Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
6	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	77.88.21.119Yandex · CLOUD	Moscow, Moscow, Russia	AS13238YANDEX LLC
6	87.250.251.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
6	87.250.250.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
62	9	-	-