Security Report: globalelite.group - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a1a1b143-ebbb-4c75-af60-886fb595ce62 Domain and IP registration (RDAP)/api/v1/rdap/a1a1b143-ebbb-4c75-af60-886fb595ce62 Certificate Transparency/api/v1/ct/globalelite.group How often this domain was scanned/api/v1/domain/stats/globalelite.group Scan history for this domain/api/v1/domain/history/globalelite.group?limit=15

This website contacted 14 IPs in 1 country across 13 domains to perform 156 HTTP transactions. The main domain is globalelite.group and was registered 1 week ago.

Submitted URL: https://globalelite.group

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Confirmed ClickFix fake-CAPTCHA malware page disguised as an engineering firm. Roster-anchored YARA hit plus EtherHiding exfiltration and a fake Microsoft paste-and-run prompt. Do not interact; never paste the given command.

Risk Factors

Known ClickFix FakeCAPTCHA malware kit (LOLBin variant) confirmed by roster-anchored YARA rule

Fake Microsoft SmartScreen/account verification prompt instructing users to paste (Ctrl+V) and run a command

EtherHiding malware exfiltration detected by Suricata (11 CRITICAL alerts)

Primary domain threat-intel match: 'unknown loader' malware

Multiple malicious third-party resources (ek clearfake-1, clearfake) loaded by the page

Blockchain RPC connections used to retrieve hidden payloads

Function() constructor code generation (7 instances) with no legitimate purpose

Domain age information unavailable

Details

Page Title

Home - Global Elite

Scan Type

public

Favicon Hash

MMH3: -1967834655

MD5: 3e352edb5dbca1cc1d6f653a6005579f

Domain Name Analysis

Within the .group top-level domain, 'globalelite.group' is registered and has no subdomain. The core label 'globalelite' covers 11 characters split between 5 vowels and six consonants. Splitting it apart reveals two words: global, elite. Expect 5.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

13.92s

Total Load Time

11.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:3,884 chars

Detector Agreement:75%

Website Classification

Primary Category

government public service72% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

72%

documentation technical

66%

blog personal website

50%

adult content

45%

corporate business

45%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	142.251.13.95Google · CDN	United States	AS15169Google LLC
11	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
11	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	104.18.11.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	142.251.13.94Google · CDN	United States	AS15169Google LLC
11	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
156	14	-	-