ScanMalware.com

Security Scan Report: remote-helpdesk.com

Redirected to:
https://remote-helpdesk.com/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f1d9fb48-eb0e-45c2-95cd-4910d20e0bccDomain and IP registration (RDAP)/api/v1/rdap/f1d9fb48-eb0e-45c2-95cd-4910d20e0bccHow often this domain was scanned/api/v1/domain/stats/remote-helpdesk.comScan history for this domain/api/v1/domain/history/remote-helpdesk.com?limit=15
This website contacted 2 IPs in 1 country across 1 domain to perform 8 HTTP transactions. The main domain is remote-helpdesk.com and was registered 5 days ago.

Submitted URL: http://remote-helpdesk.com

Effective URL:
https://remote-helpdesk.com/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

ClickFix malware page impersonating Cloudflare's human-verification check: it copies a hidden PowerShell command to the clipboard that fetches and silently installs sc.msi. Never paste it; report.

Risk Factors (6)
ClickFix clipboard shell injection delivering an MSI from cdn.remote-helpdesk.com
Hidden-window PowerShell with execution-policy bypass and silent msiexec install
CRITICAL IDS alert for PowerShell malware download
Impersonation of Cloudflare's 'Verify you are human' challenge page
Fake Upwork job listing content on an unrelated newly registered domain
Domain only 2 days old and unranked
Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Domain Name Analysis

Domain 'remote-helpdesk.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 15 characters in 'remote-helpdesk' split between five vowels and nine consonants; it also includes one hyphen. Word splitting yields three words: remote, help, desk. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

remote-helpdesk.com Just a moment Verify you are human to continue. Verify you are human Ray ID: 3219581fb52575D5-SE Your IP: 45.129.59.145 Performance & security by Cloudilare

Page Load Overview

0.38s
Total Load Time
11 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:642 chars
Detector Agreement:67%

Website Classification

Primary Category

finance banking57% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
57%
technology software
53%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.21.73.144Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.67.145.149Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
82--

Detected Technologies2

Cloudflare
50%
Cloudflare Bot Management
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D4229671F2A4102AF433D0A27ED0A38B30D0C507D52B9799BAE96265CAC7CA75F77B44

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:GaILFlmBfjUwV8kE0w8ytSJ7W/7vt94H8RPj:Ga8FUEftS9W/7vt94W

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10342:MBaE1AkYMFSCMEAAEQEgEZqmBA1hI0CiAiEBFIZDIQ4kiGBEEIo7QA4zMUFOSpPIKmEgAIMAEmR9CqmbMEK4EXGABIgBaIIw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc7e7c7ffffffff
Perceptual Hash:b23339391898cdcf
Difference Hash:980c0c1800000000
Wavelet Hash:c3c3e080f0f0f0f0
Color Hash:07002000180

Other Hashes

Crop Resistant:980c0c1800000000

Scan History

Scan history not available

Unable to load historical scan data