Security Scan Report: orlaproperties.com

Redirected to:
https://cloudflare.lc/
Site favicon
Submitted: Oct 11, 2026, 11:19:57 AMCompleted: Oct 11, 2026, 11:20:40 AMpubliccompleted

This website contacted 5 IPs in 3 countries across 4 domains to perform 5 HTTP transactions. The main domain is cloudflare.lc and was registered 1 week ago.

Submitted URL: https://orlaproperties.com/

Effective URL:

https://cloudflare.lc/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

ClickFix fake-CAPTCHA malware page impersonating Cloudflare on a 3-day-old domain: five analyst-vetted kit/YARA detections, clipboard shell-command lure, and beaconing to a flagged PowerShell-injector host. Do not interact.

Risk Factors (5)
ClickFix fake-CAPTCHA phishing kit (5 roster-anchored YARA detections)
Clipboard command injection instructing victims to paste shell commands into Terminal/File Explorer/Run dialog
Impersonation of Cloudflare's verification UI on domain cloudflare.lc
Domain only 3 days old, unranked, redirected from a threat-flagged entry domain
Beaconing to third-party domain cosmical2049.com tagged as a PowerShell injector by three intel feeds
Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Domain Name Analysis

The domain 'orlaproperties.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 14 characters in 'orlaproperties' split between six vowels and 8 consonants. Breaking it apart gives three words: or, la, properties. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://orlaproperties.com/

Page Load Overview

0.92s
Total Load Time
210 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:16 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1193.233.82.69Amsterdam, North Holland, Netherlands
AS209207Digital Hosting Provider LLC
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1193.233.126.164Amsterdam, North Holland, Netherlands
AS209207Digital Hosting Provider LLC
1195.58.146.210Denmark
AS9009M247 Europe SRL
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
55--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AF2195BCB99221B0178E707C302FDF29F87B5132BE458800D695A5752DB0FAFE056A4C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hRdhdItID9JtJfRIqSxh/fucMbzAmRYcGnRGELKkBiITYabbg1bqKj:TXdcMJbiXbj6TeR4kUIFbUt9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1323:CAAAAAAAAAAAIAAAAgAAAAAAIAAAAAIABCAAAAGACABIAAAFAAQBRAAAAAAgCABAAAAAAggAAAQAAAAAAAAAAAAAAIQAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fcfcceeefece7e00
Perceptual Hash:d1d546d60ab13b8d
Difference Hash:0424181a2a1a86c1
Wavelet Hash:fcfcccfc2e023e00
Color Hash:#6ce092

Other Hashes

Crop Resistant:0424181a2a1a86c1

Scan History

Scan history not available

Unable to load historical scan data