Security Scan Report: halcyonresource.com

Submitted: Completed: publiccompleted
This website contacted 13 IPs in 2 countries across 12 domains to perform 120 HTTP transactions. The main domain is halcyonresource.com and was registered 9 years ago.

Submitted URL: https://halcyonresource.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate Greensboro staffing site that has been compromised and now serves an IClickFix/EtherHiding ClickFix malware loader (CRITICAL hunting rule, vetted kit roster, 3 CRITICAL IDS alerts). Do not visit.

Risk Factors (5)
ClickFix / EtherHiding malware loader injected into the page (hunting rule CRITICAL, roster-anchored)
Obfuscated JavaScript that resolves its payload address from an Ethereum Sepolia smart contract
Blockchain RPC / threat-feed hosts (sepolia.gateway.tenderly.co, gateway.tenderly.co, 0xrpc.io, 1rpc.io) hidden in the decoded script
Three CRITICAL network IDS malware alerts (ClickFix domain, EtherHiding exfiltration)
Content-malware threat-intel report against the primary domain (single-source, unverified)
Domain age information unavailable

Details

Page Title

Home - Halcyon Resource

Scan Type

public

Domain Name Analysis

You're looking at domain 'halcyonresource.com' on the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'halcyonresource' stretches across 15 characters split between 6 vowels and 9 consonants. Breaking it apart gives two words: halcyon, resource. Average segment length settles at 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Hacyon Resource Home Services Grou Leader In Staffing Solutions & Reliable Talent Placement Halcyon Resource Group is one of the leading staffing agencies in Greensboro, NC and the surrounding areas...

Page Load Overview

0.60s
Total Load Time
8.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:4,261 chars
Detector Agreement:92%

Website Classification

Primary Category

corporate business62% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
62%
social media network
48%
government public service
34%
gambling betting
33%
news media journalism
33%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
73194.1.147.30Manchester, England, United Kingdom
AS210250K Media Tech Ltd.
9172.217.208.95Google · CDNUnited States
AS15169Google LLC
9142.251.13.97Google · CDNUnited States
AS15169Google LLC
9142.251.14.94Google · CDNUnited States
AS15169Google LLC
9216.239.32.36Google · CDNUnited States
AS15169Google LLC
9142.251.127.156Google · CDNUnited States
AS15169Google LLC
9142.251.20.94Google · CDNUnited States
AS15169Google LLC
9194.1.147.38Manchester, England, United Kingdom
AS210250K Media Tech Ltd.
9104.21.72.64Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5198.60.193.29Chicago, Illinois, United States
AS210250K Media Tech Ltd.
12013--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13FF37361E5E005654A934240E7F3E74E0578D253DE230CFAF3DC0666AFDAEDC9A8B642

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:g5khQk1dyzfmmSX16nCPTKZeGv95n3trzk/ZfWPDH1tw5FEHJ1t31fDtcB0:jjmSX16nuTKV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:158266:ETylMBAARIQCUYQDAQQAALRQEwOdAYUAsCDiINwQRAwJIOEMwxsghESRlIBAkhKLoPEYAACoVABZXiWiAEgIDCAIEKAIMABq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff9ff3f1f100ff
Perceptual Hash:ec91936ac514be1b
Difference Hash:6933352723258111
Wavelet Hash:fd918191f1b100ff
Color Hash:0e006008040

Scan History

Scan history not available

Unable to load historical scan data