Security Scan: FINANJA.COM

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0cd70462-db73-4fd0-b5fb-ea59a7b334ca Domain and IP registration (RDAP)/api/v1/rdap/0cd70462-db73-4fd0-b5fb-ea59a7b334ca Certificate Transparency/api/v1/ct/finanja.com How often this domain was scanned/api/v1/domain/stats/finanja.com Scan history for this domain/api/v1/domain/history/finanja.com?limit=15

This website contacted 16 IPs in 2 countries across 10 domains to perform 30 HTTP transactions. The main domain is finanja.com and was registered 21 years ago.

Submitted URL: https://finanja.com

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Mexican finance blog, self-branded and form-free, but its traffic triggers a critical EtherHiding malware IDS alert, connects to a blockchain RPC endpoint, and it loads checkmybtrobot.cc (iclickfix, 2 feeds) — with injected gambling spam pointing to a hijacked site.

Risk Factors (5)

Critical IDS malware alert (EtherHiding exfiltration) on page traffic

Blockchain RPC connection (polygon-bor-rpc.publicnode.com) consistent with EtherHiding C2

Primary domain flagged as a malware loader by threat intelligence

Loads a third-party script host (checkmybtrobot.cc) flagged as 'iclickfix' malware by two independent feeds

Injected gambling spam content indicating a compromised/hijacked CMS

Domain age information unavailable

Details

Page Title

FINANJA.COM

Scan Type

public

Favicon Hash

MMH3: 1766527523

MD5: 7131e1a6fdf0561c1e9bf17d9cac6442

Domain Name Analysis

The domain 'finanja.com' uses the commercial generic top-level domain (.com) and has no subdomain. Count 7 characters in 'finanja' containing three vowels alongside 4 consonants. Segmentation suggests two words: fin, anja. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.07s

Total Load Time

1.1 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es-AR

Text Length:2,335 chars

Detector Agreement:67%

Website Classification

Primary Category

education learning99% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

education learning

99%

finance banking

98%

government public service

51%

Detected Features

Comments

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	104.26.2.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.10.119Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	146.75.122.208Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
1	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	185.111.111.156	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
1	192.178.183.94Google · CDN	United States	AS15169Google LLC
1	104.21.52.144Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	44.230.150.222Aws · CLOUD	Boardman, Oregon, United States	AS16509Amazon.com, Inc.
30	16	-	-