Security Report: quadhubtrade.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/da3c6cce-691b-4477-8831-23d6cbbe9bcd Domain and IP registration (RDAP)/api/v1/rdap/da3c6cce-691b-4477-8831-23d6cbbe9bcdHow often this domain was scanned/api/v1/domain/stats/quadhubtrade.com Scan history for this domain/api/v1/domain/history/quadhubtrade.com?limit=15

This website contacted 13 IPs in 2 countries across 9 domains to perform 159 HTTP transactions. The main domain is quadhubtrade.com and was registered 2 months ago.

Submitted URL: https://quadhubtrade.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised car-dealership site serving an injected ClickFix kit: fake Cloudflare overlay lures Windows users into pasting a Terminal command, with EtherHiding and CRITICAL malware IDS alerts; primary domain flagged as malware.

Risk Factors (6)

Compromised/injected ClickFix overlay kit served from the site

Fake Cloudflare human-verification overlay impersonating Cloudflare branding

Primary domain flagged as malware ('clearfake') by two independent threat-intel feeds

Multiple CRITICAL IDS alerts for ClickFix domain contact and EtherHiding exfiltration

EtherHiding use of blockchain RPC endpoints to resolve next-stage payload

Obfuscated script concealing known-attacker hosts; unranked third-party script host browse-codes-enter.beer

Domain age information unavailable

Details

Page Title

Driven by precision. Built on trust - Quad Hub trade

Scan Type

public

Favicon Hash

MMH3: 258374908

MD5: 0a615109571b1f6a850be2712be0325e

Domain Name Analysis

You're looking at domain 'quadhubtrade.com' on the commercial generic top-level domain (.com). Its registrable label 'quadhubtrade' stretches across 12 characters containing 5 vowels alongside seven consonants. Tokenizing the label suggests three words: quad, hub, trade. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

10.09s

Total Load Time

4.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:6,197 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical48% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

48%

blog personal website

40%

corporate

35%

corporate business

34%

social media network

32%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	63.250.43.4	United States	AS22612Namecheap, Inc.
12	142.251.14.95Google · CDN	United States	AS15169Google LLC
12	142.250.154.94Google · CDN	United States	AS15169Google LLC
12	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
12	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	63.250.43.3	United States	AS22612Namecheap, Inc.
12	142.251.20.95Google · CDN	United States	AS15169Google LLC
159	13	-	-