Security Scan Report: africanyoutharchitects.org

Submitted: Completed: publiccompleted
This website contacted 12 IPs in 2 countries across 8 domains to perform 116 HTTP transactions. The main domain is africanyoutharchitects.org and was registered 8 years ago.

Submitted URL: https://africanyoutharchitects.org

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Compromised site serving a ClearFake 'I'm not a robot' ClickFix lure that copies a cmd.exe command to the clipboard and retrieves a payload server list from a Polygon smart contract. Do not paste anything; avoid the site.

Risk Factors (6)
Known malicious ClearFake kit injected into the page
Clipboard shell-injection (ClickFix) instructing users to paste a cmd.exe command
EtherHiding: server list retrieved from a Polygon smart contract via public RPC
Impersonation of Cloudflare's security verification interstitial
Threat-intel multi-source malware classification of the primary domain
DevTools and right-click blocking to hinder analysis
Domain age information unavailable

Details

Page Title

African Youth Architects

Scan Type

public

Domain Name Analysis

The domain 'africanyoutharchitects.org' uses the non-profit oriented generic top-level domain (.org) without a subdomain. Count 22 characters in 'africanyoutharchitects' holding eight vowels versus 14 consonants. It segments into 3 words: african, youth, architects. The median word length lands at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://africanyoutharchitects.org

Page Load Overview

17.81s
Total Load Time
5.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:477 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software56% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
56%
documentation technical
51%
adult content
41%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17184.168.28.73United States
AS398101GoDaddy.com, LLC
9142.251.127.95Google · CDNUnited States
AS15169Google LLC
9172.217.112.4Google · CDNUnited States
AS15169Google LLC
9104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.110.94Google · CDNUnited States
AS15169Google LLC
9178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
9172.217.118.4Google · CDNUnited States
AS15169Google LLC
9172.217.117.4Google · CDNUnited States
AS15169Google LLC
9172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9172.217.114.4Google · CDNUnited States
AS15169Google LLC
11612--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15F847C23EDA52C157BA361652DEE36C9343C4397640089F8FD2E6BB88FD40E621E674D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:Yea5SuUDA9QElyvdxh5jbJwwHOH6O9/G0fj5M2EF/unTBH:Mlyvdr5jbJwwLOz5M2EF2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:393324:QEMEEkQTQrjIBAw1kBFoBYGFCBAAhVGJAJIEocOQASQsIQoeKAzIgsCOGU0asATQGLOIGCiwoIGGDCSoFo9CAUsReiBh0gog

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7c3c3fffffff7
Perceptual Hash:b030e2c7cecccdc9
Difference Hash:0c1c161600000008
Wavelet Hash:0f0703033f3fff00
Color Hash:#d22dc5

Other Hashes

Crop Resistant:0c1c161600000008

Scan History

Scan history not available

Unable to load historical scan data