Security Scan Report: xrplatformtrade.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 1 domain to perform 6 HTTP transactions. The main domain is xrplatformtrade.com and was registered 3 months ago.

Submitted URL: https://xrplatformtrade.com/

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Analyst-vetted phishing kit: fake AI-trading investment funnel that captures sign-ups and SMS-verifies phone numbers for call-centre fraud, confirmed by a CRITICAL YARA hit. Avoid; never submit personal or phone data.

Risk Factors (5)
Known malicious phishing kit family (AI trading lead funnel with SMS verification) identified by analyst-vetted roster and YARA
Obfuscated lead-token exfiltration to /api/leads and SMS one-time-code harvesting overlay
Unverifiable financial services claims (AI trading, 180+ markets, 99.9% resilience) with no licence or corporate identity
HIGH-severity IDS alert (Spamhaus DROP inbound)
Recent domain (97 days) with no reputation ranking
Domain age information unavailable

Details

Page Title

XrPlatform, la tua Piattaforma di Trading AI per Crescere

Scan Type

public

Domain Name Analysis

The domain 'xrplatformtrade.com' uses the commercial generic top-level domain (.com). Its registrable label 'xrplatformtrade' stretches across 15 characters split between 4 vowels and eleven consonants. Tokenizing the label suggests four words: x, r, platform, trade. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xrplatformtrade.com/

Page Load Overview

1.28s
Total Load Time
39 KB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it
Text Length:5,205 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business74% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
74%
corporate
35%
technology software
31%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2158.94.210.119Amsterdam, North Holland, Netherlands
AS202412Omegatech LTD
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.95.214Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
65--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A593181261A7102695B391D6B3DB2B1D7A7CD103C90AD8187BFE07809FDBEE9A56370C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Zu3F1ofcJIIczSq7fqBPyEJSIed0/K8y7r:sMc2fkyEB/KL7r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:90863:CLgbNIBCNLNMCICIAkAUFNGMwnCIAOxSFADZTSZBEYhxiWBKp0AWmsj0mBAG4gIDEIISLBIPgXBwJzEBpGpGmQFAsVOEKCAy

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0001797d3f1f1f07
Perceptual Hash:8a63311cd3d96c73
Difference Hash:ddc7b1f1f1f1f3ff
Wavelet Hash:0001797f3f1f1f07
Color Hash:#87a7c5

Scan History

Scan history not available

Unable to load historical scan data