Security Scan Report: grok.en.uptodown.com

Site favicon
Submitted: Aug 4, 2026, 9:11:54 AMCompleted: Aug 4, 2026, 9:13:49 AMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 3 countries across 7 domains to perform 3 HTTP transactions. The main domain is grok.en.uptodown.com and was registered NaN years ago.

Submitted URL: https://grok.en.uptodown.com/android

The Cisco Umbrella rank of the primary domain is #88,468 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

1
Risk Score

The site appears legitimate with no phishing or malware signs.

Safety Factors
Established domain with good reputation (Top 100K)
Clean form analysis (no password or payment fields)
No malicious indicators from threat intelligence
Domain age information unavailable

Details

Page Title

Grok for Android - Download the APK from Uptodown

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(53%)

Domain Information

The domain name 'grok.en.uptodown.com' uses the commercial generic top-level domain (.com) with subdomain 'grok.en'. Its registrable label 'uptodown' stretches across 8 characters split between 3 vowels and five consonants. It segments into 3 words: up, to, down. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://grok.en.uptodown.com/android

Page Load Overview

10.46s
Total Load Time
130
HTTP Requests
18
Domains
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:7,230 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software53% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
53%
forum
35%
corporate
35%
documentation technical
31%
social_media
25%

Detected Features

Search
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
26104.26.4.120Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
26185.14.184.154Amsterdam, North Holland, Netherlands
AS14061DigitalOcean, LLC
26146.75.123.52Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
26142.251.110.97Google · CDNUnited States
AS15169Google LLC
26142.251.110.138Google · CDNUnited States
AS15169Google LLC
1305--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FBF33AB301645A0E275360C0B961B72DE2076157CA6AF4D6D3F858DCA3CEDF3297229E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:SmsrkVdh0uDJI7wkqV9lq5mylBxfTyTSxxxxFGqc49fu6GYZV3K4ujZDJqm/lG:W+dhLMwkqV9lamylBxfzGqc49fu6GYZN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:167229:YGU4jAqCEPJLjJARF0lFQCMBgAARCN0WAkCBFgAKIDCI+KFKTTREACK0LcwCBgjpAhk1GfF0SseCQRiWACHgFzBxIzaQAoBG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7e7e3e7e1e3e7e6e
Perceptual Hash:95c4e01e3fe1361e
Difference Hash:e0e0f0d26860c8dc
Wavelet Hash:3c3e3e7a1c7e0462
Color Hash:#2dd267

Other Hashes

Crop Resistant:e0e0f0d26860c8dc

Scan History

Scan history not available

Unable to load historical scan data