Security Scan Report: actionawe.org

Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 4 domains to perform 34 HTTP transactions. The main domain is actionawe.org and was registered 14 years ago.

Submitted URL: https://actionawe.org

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Confirmed ClickFix malware page: fake Cloudflare verification overlay plus YARA-confirmed kit instructs Windows users to paste a LOLBin/Terminal command. Primary domain flagged as 'iclickfix' malware. Do not interact.

Risk Factors (5)
Analyst-vetted ClickFix phishing kit (fake CAPTCHA + fake Cloudflare verification overlay) served from the scanned domain
Critical YARA malware rules matched on page body (ClickFix LOLBin / Win+X Terminal lure)
Primary domain reported as 'iclickfix' malware by two independent threat-intel feeds
19 CRITICAL ET MALWARE EtherHiding Exfil M2 network IDS alerts
Fake 'security verification' instructing visitors to open Terminal and paste an attacker-supplied command (LOLBin execution)
Domain age information unavailable

Details

Page Title

sw4tted

Scan Type

public

Domain Name Analysis

Domain 'actionawe.org' uses the non-profit oriented generic top-level domain (.org). The second-level label 'actionawe' is 9 characters long split between five vowels and 4 consonants. Splitting it apart reveals 3 words: action, a, we. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://actionawe.org

Page Load Overview

1.40s
Total Load Time
65 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,301 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
77%
e-commerce shopping
72%
documentation technical
58%
corporate business
45%
government public service
42%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10172.67.179.247Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
615.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
634.111.175.102Google · CDNKansas City, Missouri, United States
AS396982Google LLC
6104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
63.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
345--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F1A23C33A355203D61334BEB56A7732C703AA06EF9138658BB6E417486D6DDAF433E84

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:qYKACAdLFLi7gg41DMRYx2wswKNNr0YeLLfXTu/sT54UEkyl+P:q9ACAE0g4hMRYx2wswQgh3T59Ekyl+P

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:22617:kKACFCAQQRwftCGQgA3YFIC4QBRFUEcDCoASwCwlTaEwqGhaIhSAcEBLhWJIGIQFFcMEpLAIQjBRByFABIowPjhAgEEKOREA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003c3c003c383c00
Perceptual Hash:cfcd3432303265cf
Difference Hash:0470725469696816
Wavelet Hash:583c3c3c7c3d3d22
Color Hash:#7f79d2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data