Security Report: dxghq.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a54606e6-24b3-4d0d-9800-342b05f29453 Domain and IP registration (RDAP)/api/v1/rdap/a54606e6-24b3-4d0d-9800-342b05f29453 Certificate Transparency/api/v1/ct/dxghq.com How often this domain was scanned/api/v1/domain/stats/dxghq.com Scan history for this domain/api/v1/domain/history/dxghq.com?limit=15

This website contacted 8 IPs in 2 countries across 8 domains to perform 78 HTTP transactions. The main domain is dxghq.com and was registered 1 week ago.

Submitted URL: https://dxghq.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Legitimate-looking DXG agency site has been compromised: ClearFake/EtherHiding malware — blockchain-based C2, a fake Cloudflare 'verification' page coaching terminal commands (ClickFix), and a CRITICAL EtherHiding IDS alert. Do not interact.

Risk Factors (6)

CRITICAL IDS malware alert (ET MALWARE EtherHiding Exfil) on the scanned page's traffic

ClearFake-labelled third-party domain (wmicconfidance.info) loaded by the page

EtherHiding blockchain C2 pattern: Tenderly polygon RPC gateway + Ethereum getDomain() contract request

Fake verification page coaching the user through keyboard/terminal steps (ClickFix-style drive-by infection)

Primary domain flagged as malware ('iclickfix') in threat intelligence

Dynamic Function() constructor code generation on a marketing site

Domain age information unavailable

Details

Page Title

DXG | Experience Innovation & Digital Transformation Agency

Scan Type

public

Favicon Hash

MMH3: 518360351

MD5: c9efc873ce361aae1cb7b63cb2addc0f

Domain Name Analysis

Domain 'dxghq.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'dxghq' spans 5 characters holding zero vowels versus 5 consonants. Tokenizing the label suggests 2 words: dx, ghq. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.74s

Total Load Time

5.9 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:2,806 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software76% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

76%

corporate business

73%

corporate

35%

government public service

30%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	151.101.130.159Fastly · CDN	United States	AS54113Fastly, Inc.
9	142.251.155.119Google · CDN	United States	AS15169Google LLC
9	142.251.150.119Google · CDN	United States	AS15169Google LLC
9	142.251.127.97Google · CDN	United States	AS15169Google LLC
9	216.239.32.36Google · CDN	United States	AS15169Google LLC
9	192.178.183.94Google · CDN	United States	AS15169Google LLC
9	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
9	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
78	8	-	-