Security Scan Report: en.exloader.net

Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 2 countries across 15 domains to perform 133 HTTP transactions. The main domain is exloader.net and was registered 7 years ago.

Submitted URL: https://en.exloader.net/

AI Security Verdict

Low Risk

Confidence: 65%

3
Risk Score

Established site offering game cheats/hacks. No phishing/malware detected, but cheat software carries inherent PUP risk. Use caution.

Risk Factors (4)
Distributes game cheats/hacks, often associated with PUP/riskware
Multiple eval() calls may indicate dynamic code execution
Six cross-domain redirects
Unranked in Cisco Umbrella
Safety Factors (5)
Established domain (over 7 years old)
No credential or payment forms on page
No indicators of compromise, YARA, or IDS alerts
Self-branding (ExLoader) matches domain, not impersonating another brand
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

ExLoader | Best free cheats and hacks for CS2 and other games

Scan Type

public

Domain Name Analysis

Domain 'en.exloader.net' uses the network infrastructure generic top-level domain (.net), featuring subdomain 'en'. The core label 'exloader' covers 8 characters split between four vowels and four consonants. Breaking it apart gives two words: ex, loader. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://en.exloader.net/

Page Load Overview

2.55s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:9,240 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software61% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
61%
entertainment media
53%
documentation technical
27%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14172.66.152.149Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.13.97Google · CDNUnited States
AS15169Google LLC
7142.251.13.157Google · CDNUnited States
AS15169Google LLC
7104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.20.28.184Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.13.154Google · CDNUnited States
AS15169Google LLC
7104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
777.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
7216.239.32.36Google · CDNUnited States
AS15169Google LLC
7142.251.127.155Google · CDNUnited States
AS15169Google LLC
13318--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F4C105B7A6D0D8192351C1D9D9867408C417890B959DCC76B3CF0D2F5BE2BE2C4F7A2A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:Tb0YCod+jeXcmdds/sPpsH37WesZNniC/2bdbX5:cYvd+aXcmddskPOcZNiC/GbX5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5790:QBjcwAIQsAIahCTACQhNAACEhKICEQAHgVgAQQhCICYlACMBHCUJAATABCAoBAiAqQBwIUAs1IE0uAgVICAAAAjJABIgGgBB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffc9f8f0f8ffcb
Perceptual Hash:e983b6d649ab291c
Difference Hash:5534331332133813
Wavelet Hash:fcff818080f0ff81
Color Hash:#a887c5

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data