Security Scan Report: scarunites.org

Site favicon
Submitted: Oct 12, 2026, 12:07:28 AMCompleted: Oct 12, 2026, 12:08:06 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 92%

10
Risk Score

Analyst-vetted ClickFix fake-CAPTCHA (LOLBin) kit detected and the primary domain is threat-intel flagged for iClickFix malware; the site lures visitors into running a copied Windows command. Do not visit or interact.

Risk Factors (5)
Known malicious ClickFix fake-CAPTCHA / LOLBin kit confirmed on the scanned page (analyst-vetted ground truth)
Primary domain flagged as 'iclickfix (malware)' in threat intelligence
Fake CAPTCHA/verification step designed to make visitors paste and execute a Windows LOLBin command (msiexec/mshta/wmic/certutil/regsvr32)
Content cloaked behind a bot-protection wall so the payload is only shown to real browsers
Repurposed/compromised ageing domain used for malware distribution
Domain age information unavailable

Details

Page Title

scarunites.org

Scan Type

public

Domain Name Analysis

The domain name 'scarunites.org' uses the non-profit oriented generic top-level domain (.org) without a subdomain. Its registrable label 'scarunites' stretches across 10 characters split between 4 vowels and 6 consonants. Segmentation suggests 2 words: scar, unites. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://scarunites.org

Page Load Overview

2.10s
Total Load Time
686 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-GB
Text Length:1,342 chars
Detector Agreement:67%

Website Classification

Primary Category

news media journalism39% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

news media journalism
39%
documentation technical
30%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6138.68.162.211Slough, England, United Kingdom
AS14061DigitalOcean, LLC
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
352.63.121.74Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
3142.251.151.119Google · CDNUnited States
AS15169Google LLC
3142.250.154.105Google · CDNUnited States
AS15169Google LLC
185--

Detected Technologies4

WordPressv7.1.3
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D932D64CEEB1A3F0F22203DE67AF699E266461D31049C640F58C6EA46F0B3AD4547E69

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:GXHNsGeTHQpD+da6+8QPUV7lrDyjFrxznQQ9VFAE6+7My3ZjtgD:GXX+/zV7SFZQQ9VFAEN7f3ZjtgD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11786:UEBQakAEqsSoAoS7VQBOYVlKQQwhEigdGogIIEEQIBgdCYuA5gBBVQInDNKhFJ0xkCLB4RY8zCGNgNQQCBCJZQFCNooAnEIw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff81ffffffff
Perceptual Hash:bf2fc0c03f3fc0c0
Difference Hash:0000012301000000
Wavelet Hash:ffffff8100000000
Color Hash:#d22dc5

Other Hashes

Crop Resistant:0000012301000000

Scan History

Scan history not available

Unable to load historical scan data