Security Scan Report: joinaxelar.xyz

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 3 domains to perform 17 HTTP transactions. The main domain is joinaxelar.xyz and was registered 2 weeks ago.

Submitted URL: https://joinaxelar.xyz/

AI Security Verdict

High Risk

Confidence: 84%

8
Risk Score

Page impersonates Axelar's builder portal on unofficial joinaxelar.xyz; primary domain has a single-source phishing report and a HIGH IDS PowerShell stager alert, but no credential/payment forms were found.

Risk Factors (3)
Non-official .xyz domain using Axelar branding and a recruiter/builders portal theme
Primary domain reported as phishing by a single-source threat-intel submission
High-severity IDS alert for PowerShell stager activity
Domain age information unavailable

Details

Page Title

Axelar Builders Portal

Scan Type

public

Domain Name Analysis

The domain name 'joinaxelar.xyz' uses the open generic top-level domain (.xyz) with no subdomain. Count 10 characters in 'joinaxelar' holding five vowels versus five consonants. It segments into three words: join, axel, ar. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://joinaxelar.xyz/

Page Load Overview

4.35s
Total Load Time
327 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,843 chars
Detector Agreement:75%

Website Classification

Primary Category

cryptocurrency blockchain58% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
58%
cryptocurrency
22%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7208.84.100.64United States
AS22295Advin Services LLC
5142.250.154.95Google · CDNUnited States
AS15169Google LLC
5142.251.110.94Google · CDNUnited States
AS15169Google LLC
173--

Detected Technologies2

Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B72251A280F21673122382E36FD12755BDD00003C2D9115973BD47A9AFBAE6AEE1720E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:4qjqEH+8DLHy0/k3kkhVkkWMkFHDkbLkkqKQB5:4qNH+8PJMZhHeFwbokq35

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9952:BEgj4ISyEuPaAahYjtUcGAgkCEaCCAgEICCSQUQYEtCgiEEhf0FAmZAkgWHVLIMsjCGCEs4J0wgVxsIDZRXGpwBRkBWjMDgA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:60006d6d7d652101
Perceptual Hash:c3f13cac86e3e11c
Difference Hash:c5a9c9c9c9cdc531
Wavelet Hash:63c16d7d7d752101
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data