Security Scan Report: xtradegrok36.net

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 1 domain to perform 8 HTTP transactions. The main domain is xtradegrok36.net and was registered 7 months ago.

Submitted URL: https://xtradegrok36.net/

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Analyst-vetted fake AI-trading lead funnel (YARA AiTrading_LeadFunnel_SmsVerify) harvesting sign-ups and phone numbers for call-centre fraud. No legitimate operator or licence; avoid.

Risk Factors (6)
Confirmed malicious investment-scam lead funnel kit (SMS phone-verification capture for call-centre fraud)
CRITICAL roster-anchored YARA rule AiTrading_LeadFunnel_SmsVerify present in page body
Fabricated AI-trading brand with no corporate identity, licence or regulatory disclosure
Obfuscation/encoding functions in inline JavaScript
Page pulls resources from unrelated suspicious external domains (finsy4-modi91.cfd, ph.splicer-lane.pro)
HIGH-severity IDS alert (Spamhaus DROP) associated with the hosting address
Domain age information unavailable

Details

Page Title

xTradeGrok 3.6 — AI Platform Built for Freelance Capital

Scan Type

public

Domain Name Analysis

Domain 'xtradegrok36.net' uses the network infrastructure generic top-level domain (.net) while skipping any subdomain. The registrable portion 'xtradegrok36' spans 12 characters with 3 vowels and 7 consonants, notching 2 digits. Word splitting yields 4 words: xtra, deg, rok, 36. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xtradegrok36.net/

Page Load Overview

1.11s
Total Load Time
36 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,503 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service61% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
61%
documentation technical
60%
technology software
54%
corporate business
49%
finance banking
47%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4158.94.210.119Amsterdam, North Holland, Netherlands
AS202412Omegatech LTD
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.148.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
85--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T174633A613596000562A3A1E6E3DF3B1EAA2DD103C88AC851BBFD4761DFD7ED6A52370C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:gmdaHdtHgQxFlIIMowYqlxwXSgpVYa23p7rI+iT3uQ/KUrFq9LhN3REyyIQrpPJM:gmdaPgczII5wdleXSIed0/K8y7r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:71584:xkAttoQBoBcFZhACQATUQjSMB9IFoKSsBadWOYDL8MUjgiQBABITAgBKzqQTSJIEQkFgjP+gHImDPGwJIXAvCgwgRMAIqIVp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff031707070707ff
Perceptual Hash:aac9f1f1c9c8c8c9
Difference Hash:fbfff7ffffffffff
Wavelet Hash:ff030307070707ff
Color Hash:#8a1f93

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data