ScanMalware.com

Security Scan Report: smartxtactive.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bb288753-6804-4e3e-95a5-ba484066da51Domain and IP registration (RDAP)/api/v1/rdap/bb288753-6804-4e3e-95a5-ba484066da51How often this domain was scanned/api/v1/domain/stats/smartxtactive.comScan history for this domain/api/v1/domain/history/smartxtactive.com?limit=15
This website contacted 21 IPs in 2 countries across 17 domains to perform 157 HTTP transactions. The main domain is smartxtactive.com and was registered 2 years 7 months ago.

Submitted URL: https://smartxtactive.com

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Compromised SmartX site serving a ClickFix attack: fake Cloudflare 'Human Verification' overlay tells Windows users to press Win+X, paste and run a command in Terminal, confirmed by YARA kit hits, EtherHiding IDS alerts and malware-flagged domain intel.

Risk Factors (5)
Fake 'Human Verification' ClickFix overlay instructing Windows Key+X → Terminal → Ctrl+V → Enter (paste-and-run PowerShell lure)
Overlay impersonates a Cloudflare-style bot check with a fake Ray ID and 'Verification successful' messaging
Threat-intel match on the primary domain and URL as a malware loader/unknown malware (2 corroborating feeds)
EtherHiding exfiltration IDS alerts and page-script connections to blockchain RPC endpoints (bsc-testnet-rpc.publicnode.com, bsc-testnet.drpc.org)
Third-party resource hosts flagged as malicious (checkyoubrowse.codes, rehearsal-b.com) and injected gambling/casino SEO spam content
Domain age information unavailable

Details

Page Title

SmartX – Works in the smartest way

Scan Type

public

Domain Name Analysis

The domain name 'smartxtactive.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'smartxtactive' stretches across 13 characters holding four vowels versus 9 consonants. Segmentation suggests three words: smart, xt, active. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://smartxtactive.com

Page Load Overview

9.14s
Total Load Time
2.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:6,103 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software88% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
88%
documentation technical
62%
education learning
48%
news media journalism
39%
government public service
26%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.13.95Google · CDNUnited States
AS15169Google LLC
7104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.110.94Google · CDNUnited States
AS15169Google LLC
7188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.20.95Google · CDNUnited States
AS15169Google LLC
73.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
715.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
73.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
15721--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D0725431A06901567F4F9BADC1C3732DE588EA56DA06A7B770F4205887B8DF700E7A1E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Px3NT2prqwRXdSZsTaAf69K3h1TNslQCfEGHRmy4kWx3+CN:HT2pr/ZdSZUaArkW3N

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16134:BAAQOwAqoqqAHilZvEBMaAClMgUBExqjyrwAwg2kFCAgYAEhQCmxBEADCCVxQABafMoNAVQuAAiILS4AXgBUiT1cIN6BkJBA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc7c3c3ffffffff
Perceptual Hash:b03193c7cecccccc
Difference Hash:0818163600000020
Wavelet Hash:ffc7c3c33030f000
Color Hash:#8799c5

Other Hashes

Crop Resistant:0818163600000020

Scan History

Scan history not available

Unable to load historical scan data