Security Scan: BFT

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/787b9e7a-62d6-413c-91db-3e208a574f91 Domain and IP registration (RDAP)/api/v1/rdap/787b9e7a-62d6-413c-91db-3e208a574f91How often this domain was scanned/api/v1/domain/stats/botforextradx.com Scan history for this domain/api/v1/domain/history/botforextradx.com?limit=15

This website contacted 16 IPs in 2 countries across 13 domains to perform 61 HTTP transactions. The main domain is botforextradx.com and was registered 3 months ago.

Submitted URL: https://botforextradx.com

Effective URL:

https://botforextradx.com/login

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Confirmed ClickFix phishing page: fake Cloudflare verification pushes a paste-into-Terminal malware lure, while a login form harvests credentials. Domain flagged as malware by two feeds plus CRITICAL EtherHiding IDS alerts.

Risk Factors (6)

Fake Cloudflare 'security verification' overlay impersonating a trusted brand (Ray ID, 'Performance and Security by Cloudflare')

ClickFix social-engineering instructions leading users to paste an attacker command into Windows Terminal/PowerShell

Credential-harvesting login form (password field) on a non-official, unranked 104-day-old domain

Domain flagged as malware/fake by two independent threat-intelligence feeds

Repeated CRITICAL IDS alerts for EtherHiding malware exfiltration over blockchain RPC

Unranked domain (not in Cisco Umbrella top 1M) presenting itself as a secure crypto trading platform

Domain age information unavailable

Details

Page Title

BFT

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'botforextradx.com' is registered without a subdomain. Count 13 characters in 'botforextradx' containing four vowels alongside nine consonants. It segments into 4 words: bot, for, extra, dx. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.78s

Total Load Time

1.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:997 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

77%

documentation technical

50%

corporate

35%

government public service

29%

phishing scam

28%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	172.67.146.217Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	184.24.77.83Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	184.24.77.75Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	35.71.129.99Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
61	16	-	-