Security Scan Report: baldreamloans.com.au

Redirected to:
https://cloudflare.lc/
Site favicon
Submitted: Oct 8, 2026, 5:06:37 PMCompleted: Oct 8, 2026, 5:07:15 PMpubliccompleted

This website contacted 4 IPs in 3 countries across 5 domains to perform 5 HTTP transactions. The main domain is cloudflare.lc and was registered 1 week ago.

Submitted URL: https://baldreamloans.com.au

Effective URL:

https://cloudflare.lc/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

ClickFix fake-CAPTCHA malware kit: page mimics a Cloudflare 'Just a moment...' check and lures visitors into pasting a malicious command. Domain flagged as malware by two feeds. Do not interact.

Risk Factors (5)
Analyst-vetted ClickFix fake-CAPTCHA malware kit served on the page (CRITICAL)
Multiple high-precision YARA phishing-kit matches marked roster-anchored
Primary domain reported as malware ('clearfake') by two independent threat feeds
Fake Cloudflare-style 'Just a moment...' verification overlay used as a social-engineering lure
Page scripts beacon to unranked third-party hosts including a domain reported as a PowerShell injector
Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Domain Name Analysis

Within the Australian country-code top-level domain (.com.au), 'baldreamloans.com.au' is registered with no subdomain. The second-level label 'baldreamloans' is 13 characters long containing five vowels alongside eight consonants. Splitting it apart reveals 3 words: bal, dream, loans. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://baldreamloans.com.au

Page Load Overview

6.84s
Total Load Time
209 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:16 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2193.233.82.69Amsterdam, North Holland, Netherlands
AS209207Digital Hosting Provider LLC
1172.67.208.86Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1193.233.126.164Amsterdam, North Holland, Netherlands
AS209207Digital Hosting Provider LLC
1195.58.146.210Denmark
AS9009M247 Europe SRL
54--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AF2195BCB99221B0178E707C302FDF29F87B5132BE458800D695A5752DB0FAFE056A4C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hRdhdItID9JtJfRIqSxh/fucMbzAmRYcGnRGELKkBiITYabbg1bqKj:TXdcMJbiXbj6TeR4kUIFbUt9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1323:CAAAAAAAAAAAIAAAAgAAAAAAIAAAAAIABCAAAAGACABIAAAFAAQBRAAAAAAgCABAAAAAAggAAAQAAAAAAAAAAAAAAIQAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fcfcceeefece7e00
Perceptual Hash:d1d546d60ab13b99
Difference Hash:0424181a2a1a8681
Wavelet Hash:f0f0ccfe2e023e00
Color Hash:#6640bf

Other Hashes

Crop Resistant:0424181a2a1a8681

Scan History

Scan history not available

Unable to load historical scan data