Security Scan Report: fearlessaffiliate.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 22 IPs in 4 countries across 18 domains to perform 72 HTTP transactions. The main domain is fearlessaffiliate.com and was registered 9 years ago.

Submitted URL: https://fearlessaffiliate.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Legitimate 9-year-old blog shell compromised to serve an analyst-vetted IClickFix/EtherHiding ClickFix loader; 7 CRITICAL IDS malware alerts, obfuscated blockchain-stage script, and a primary-domain malware IoC. Do not visit.

Risk Factors (5)
Known malicious ClickFix/EtherHiding injection kit identified on the page (analyst-vetted roster, CRITICAL)
Obfuscated JavaScript hides three threat-feed-listed hosts and reads its next stage from a blockchain smart contract
7 CRITICAL network IDS malware alerts (ET MALWARE ClickFix, EtherHiding Exfil)
Primary domain matched in threat intelligence as a malware loader (single-source, unverified)
Page content is completely unrelated to the malicious script it serves, indicating a compromised host used as a malware distribution vector
Domain age information unavailable

Details

Page Title

UNDER CONSTRUCTION - Fearless Affiliate

Scan Type

public

Domain Name Analysis

The domain name 'fearlessaffiliate.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'fearlessaffiliate' stretches across 17 characters with eight vowels and nine consonants. Breaking it apart gives 2 words: fearless, affiliate. Median word length comes out to 8.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fearlessaffiliate.com

Page Load Overview

5.46s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,246 chars
Detector Agreement:100%

Website Classification

Primary Category

blog personal website46% confidence
Type: spa
Method: ml+structural

All Detected Categories

blog personal website
46%
technology software
35%
corporate
35%
documentation technical
26%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
966.102.137.188Toronto, Ontario, Canada
AS40092HostPapa
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
3157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
3146.75.120.84Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
318.66.102.11Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3172.64.150.190Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.250.154.94Google · CDNUnited States
AS15169Google LLC
365.9.130.6Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3216.239.34.36Google · CDNUnited States
AS15169Google LLC
7222--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13FA33BB3988C257A163B539E7162F23853ABE021DB415AB2B0FF923847C5EDB1157B0D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Eu4i+f4rwGybOticFF/q2Bl2oJhC7QF9O9ic+Q/sUtUxzDTe2aME+UJ+eK:/g6ticFF/q2Bl2oJhC7QF9O9ic+Q/sUy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:106770:CIVBA4ECYIJpJgACYpHGgIRZoABEOSO7HCAI4so0MIaBwKOd5KLhMCMz0gMIQd0gYQjCQO4AIhAKiQASBeCVk0wgkAQAxQEL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00fdfde5e7ff0000
Perceptual Hash:eaca1db53521c95a
Difference Hash:28e9e9cd4cb60631
Wavelet Hash:00fdfce5e7ff0000
Color Hash:#b7bf40

Other Hashes

Crop Resistant:28e9e9cd4cb60631

Scan History

Scan history not available

Unable to load historical scan data