Security Scan Report: axelarbuilders.ink

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 17 HTTP transactions. The main domain is axelarbuilders.ink and was registered 2 weeks ago.

Submitted URL: https://axelarbuilders.ink/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Analyst-vetted ClickFix recruitment kit impersonating Axelar: fake Web3 job portal that gates applicants behind a referral code and delivers an OverLord stealer via clipboard command; confirmed by CRITICAL hunting rule and a HIGH IDS stager alert.

Risk Factors (5)
Analyst-vetted known malicious kit match (OverLord stealer recruitment/ClickFix family)
CRITICAL hunting rule hit for a ClickFix clipboard-command injection kit
HIGH-severity IDS alert for PowerShell stager traffic
Brand impersonation of Axelar on a non-official, unranked domain
Social-engineering lure: fake engineering job/recruitment portal soliciting applicants
Domain age information unavailable

Details

Page Title

Axelar Builders Portal

Scan Type

public

Domain Name Analysis

Within the .ink top-level domain, 'axelarbuilders.ink' is registered. The registrable portion 'axelarbuilders' spans 14 characters split between six vowels and eight consonants. Segmentation suggests three words: axel, ar, builders. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

A><ELAR Axelar >:( builders ) Engineering Portal Build the Internet Protocol of Web3 Axelar connects blockchains the way Internet protocols connect computer networks. We're inviting protocol engin...

Page Load Overview

1.17s
Total Load Time
234 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,843 chars
Detector Agreement:94%

All Detected Languages

🇺🇸en(98%)🇿🇦af(2%)

Website Classification

Primary Category

cryptocurrency blockchain58% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
58%
cryptocurrency
22%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9193.160.32.188Nuremberg, Bavaria, Germany
AS206216Advin Services LLC
3142.251.20.94Google · CDNUnited States
AS15169Google LLC
3142.251.20.95Google · CDNUnited States
AS15169Google LLC
3142.251.110.94Google · CDNUnited States
AS15169Google LLC
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
175--

Detected Technologies2

Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B72251A280F21673122382E36FD12755BDD00003C2D9115973BD47A9AFBAE6AEE1720E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:4qjqEH+8DLHy0/k3kkhVkkWMkFHDkbLkkqKQB5:4qNH+8PJMZhHeFwbokq35

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9952:BEgj4ISyEuPaAahYjtUcGAgkCEaCCAgEICCSQUQYEtCgiEEhf0FAmZAkgWHVLIMsjCGCEs4J0wgVxsIDZRXGpwBRkBWjMDgA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:60006d6d7d612101
Perceptual Hash:c3f13cac86e3e11c
Difference Hash:c5a9c9c9c9cdc531
Wavelet Hash:63c16d7d7d752101
Color Hash:38000038000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data