Security Scan Report: strenixcaspian.com

Site favicon
Submitted: Sep 19, 2026, 11:47:30 AMCompleted: Sep 19, 2026, 11:48:07 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Looks like a real oil & gas site, but it loads a blockchain RPC endpoint and a malware-flagged third-party (xaz2.com), and a CRITICAL IDS EtherHiding exfiltration alert fired. Likely compromised/abused to serve hidden malware.

Risk Factors
CRITICAL network IDS alert indicating EtherHiding exfiltration (ET MALWARE)
Loads a blockchain RPC domain (gateway.tenderly.co) inappropriate to the site's stated purpose
Loads an external domain (xaz2.com) flagged as malware (iclickfix) by multiple feeds
Primary domain flagged with a content-malware (RAT) indicator
Domain age information unavailable

Details

Page Title

Caspian – Strenix

Scan Type

public

Domain Name Analysis

The domain 'strenixcaspian.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'strenixcaspian' spans 14 characters split between 5 vowels and nine consonants. Word splitting yields 3 words: str, enix, caspian. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://strenixcaspian.com

Page Load Overview

16.84s
Total Load Time
862 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:7,132 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical73% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
73%
social_media
25%
forum
25%

Detected Features

Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14162.210.96.122United States
AS14555LiquidNet US LLC
14142.251.13.95Google · CDNUnited States
AS15169Google LLC
1435.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
14188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14142.251.110.94Google · CDNUnited States
AS15169Google LLC
705--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T196820872190B298D3A99A743BBB7B01DC28348B79236DAABD01F141D6375AFB3141D63

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:D9fNwMKDfNQ62Ho/xE6x4aUg/5j/nfnDyWiZ56m2UVE/FDDV18bcsnU07qFrDVyB:D9i5Q62I/xE6x4g5bn/Xir65UVE/FDDo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18261:LAgg9EwqQEMDISSKEWAlMBgSJYB1cABQUIsAHWB8NnokASYTECAnIggMBCAlGaUTlE4OtICEEVgAgOgZdISTDEIIUCORSgSi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff030101010301ff
Perceptual Hash:aad1d5d5d5d4d500
Difference Hash:0cbf3f3f3f7f7f7f
Wavelet Hash:ff030307070707ff
Color Hash:#533a78

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data