Security Scan Report: icte-dubai.com

Submitted: Completed: publiccompleted

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Established domain repurposed into a fake Xbox gift-card generator with an offer wall and ClickFix instructions to paste PowerShell commands; domain flagged as malware and critical EtherHiding exfiltration alerts were recorded. Do not interact.

Risk Factors (6)
Multi-source corroborated malware threat-intelligence match on the scanned primary domain
CRITICAL IDS alerts for malware exfiltration traffic (EtherHiding)
Impersonation of Microsoft's Xbox brand with a fake gift-card generator on an unrelated domain
Social-engineering ClickFix-style instructions to run pasted PowerShell/Terminal commands
Offer-wall / 'complete an offer to unlock premium content' reward bait
Third-party blockchain RPC host loaded by the page flagged as malware
Domain age information unavailable

Details

Page Title

X BOX

Scan Type

public

Domain Name Analysis

The domain 'icte-dubai.com' uses the commercial generic top-level domain (.com) with no subdomain. The core label 'icte-dubai' covers 10 characters with five vowels and four consonants; bonus characters include one hyphen. Breaking it apart gives three words: i, cte, dubai. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://icte-dubai.com

Page Load Overview

2.15s
Total Load Time
936 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,999 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software51% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
51%
documentation technical
39%
government public service
27%
cryptocurrency blockchain
26%
finance banking
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20172.67.158.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.97Google · CDNUnited States
AS15169Google LLC
3151.101.66.217Fastly · CDNUnited States
AS54113Fastly, Inc.
3142.251.13.95Google · CDNUnited States
AS15169Google LLC
318.64.181.199Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
3172.67.143.224Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.113Google · CDNUnited States
AS15169Google LLC
3216.239.34.36Google · CDNUnited States
AS15169Google LLC
3104.21.63.62Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9526--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1293343EB728B043555DF62AB29A1535C3831D00BAD17CC5E3BBC456CAF40EF79626B88

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:xu4ajge5M9bhJOS/tEbuokyr/N9uPo9Ekyl+w5dzoM9Fxfj3jsj9jujQjhjL2/Jf:xu4a5SbNgm4N9uPodC5dEMHxG2/P82Br

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:52539:oCINKslpCbCDKAYjMAGBFkAgLCDwUBQLyAwwFkhBI1A0DEhDYMcVh4pMDGjzhEAMERU0oAKADUAVMmCSmpJhD0ENzHgChSWA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:383c3c0000000018
Perceptual Hash:cfcfcf7630303070
Difference Hash:7071711620410031
Wavelet Hash:fffc3c1c00000cff
Color Hash:#7994d2

Scan History

Scan history not available

Unable to load historical scan data