Security Report: saascription.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1dbcbaa6-48c3-44ff-b239-56adb1a96e5d Domain and IP registration (RDAP)/api/v1/rdap/1dbcbaa6-48c3-44ff-b239-56adb1a96e5dHow often this domain was scanned/api/v1/domain/stats/saascription.app Scan history for this domain/api/v1/domain/history/saascription.app?limit=15

This website contacted 9 IPs in 1 country across 6 domains to perform 80 HTTP transactions. The main domain is saascription.app and was registered 6 months ago.

Submitted URL: https://saascription.app/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised/malicious SaaS landing page carrying an analyst-confirmed Windows ClickFix kit: fake Cloudflare verification tells users to paste a command into Terminal, with malware threat-intel and EtherHiding C2 IDS hits.

Risk Factors (5)

Known ClickFix (Win+X Terminal paste) malware-delivery kit injected into the page

Multi-source corroborated malware threat-intel indicators on the primary domain and scanned URL

19 CRITICAL IDS alerts for EtherHiding command-and-control/exfiltration traffic

Fake Cloudflare 'human verification' overlay impersonating a security vendor to social-engineer code execution

Endpoint abuse: instructs visitors to paste clipboard content into PowerShell/Terminal, executing attacker-controlled commands

Domain age information unavailable

Details

Page Title

Saascription | SaaS subscription management

Scan Type

public

Favicon Hash

MMH3: -2070047203

MD5: c30c7d42707a47a3f4591831641e50dc

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'saascription.app' is registered without a subdomain. The core label 'saascription' covers 12 characters with 5 vowels and seven consonants. Breaking it apart gives 3 words: s, a, ascription. Median word length is 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Features Testimonials Pricing Blog ACTIVE MONTHLY] Qa (6329.94-515 Adobe CC Design Jools Subscriptions YS ———} Slack! Discover, track, and optimize all your SaaS tools in one clean platform. Take...

Page Load Overview

1.86s

Total Load Time

527 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:4,063 chars

Detector Agreement:75%

Website Classification

Primary Category

technology software74% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

74%

finance banking

46%

documentation technical

25%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	104.21.56.22Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	192.178.183.97Google · CDN	United States	AS15169Google LLC
8	216.239.32.36Google · CDN	United States	AS15169Google LLC
8	172.67.175.252Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
8	216.239.34.36Google · CDN	United States	AS15169Google LLC
8	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
8	172.67.142.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
80	9	-	-