Security Scan Report: www.fokurizuziri.com

Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 6 domains to perform 39 HTTP transactions. The main domain is fokurizuziri.com and was registered 2 weeks ago.

Submitted URL: https://www.fokurizuziri.com/

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Fake AI-trading platform matching a vetted phishing lead-funnel kit (YARA AiTrading_LeadFunnel_SmsVerify): captures email plus hidden clickId and SMS-verifies phone numbers to feed call-centre investment fraud. Avoid; do not submit details.

Risk Factors (6)
Known malicious phishing/investment-fraud kit identified by analyst-vetted roster (critical)
Critical YARA rule AiTrading_LeadFunnel_SmsVerify matched on the HTML body
Lead-capture funnel with hidden clickId token and SMS phone-verification overlay (kit signature)
Inline JavaScript performing encoding/decoding, consistent with the kit's obfuscated lead-token handling
Very new domain (15 days) with no reputation and no verifiable corporate identity
Suricata HIGH alert: ET DROP Spamhaus DROP Listed Traffic Inbound group 32
Domain age information unavailable

Details

Page Title

Fokuri Zuziri — KI-Plattform für fundierte Handelsentscheidungenother network

Scan Type

public

Domain Name Analysis

The domain 'www.fokurizuziri.com' uses the commercial generic top-level domain (.com) with subdomain 'www'. The registrable portion 'fokurizuziri' spans 12 characters holding 6 vowels versus six consonants. Word splitting yields 5 words: f, okur, iz, uzi, ri. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.fokurizuziri.com/

Page Load Overview

N/A
Total Load Time
418 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:6,393 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service79% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
79%
corporate business
68%
technology software
64%
finance banking
61%
news media journalism
39%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11158.94.210.119Amsterdam, North Holland, Netherlands
AS202412Omegatech LTD
7172.67.183.208Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.67.148.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7151.101.1.229Fastly · CDNUnited States
AS54113Fastly, Inc.
05--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T138734B6131E3102552B7A192B3AB7F1A7E1DD213C98A8454B6FD8672DFC7EF2942270C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:zpqLu58T9VjcWIIaJa79sZSSIed0/K8y7r:SNcLJggs/KL7r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:78812:JFAAUADgHWFEgoVolVIIikyw5YKICEUAY0RBEQIdluKfVELA4FgIoQXFDQDhIAI+gZCEgYgBYkikEKAg9DXCiowKUSshFAT4

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fd00040400ffffff
Perceptual Hash:9612edc96d92a6d1
Difference Hash:63edccccc3311027
Wavelet Hash:f900040400ffffff
Color Hash:#8479d2

Scan History

Scan history not available

Unable to load historical scan data