Security Scan Report: relate-zo-finance.webflow.io

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 7 domains to perform 234 HTTP transactions. The main domain is webflow.io and was registered 13 years ago.

Submitted URL: https://relate-zo-finance.webflow.io/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Webflow-hosted look-alike of ZO Finance on a non-official domain, flagged for phishing and calling the real brand's API. No forms on this page, but brand impersonation plus a phishing hit make it unsafe to use.

Risk Factors (4)
Impersonation of ZO Finance brand on a Webflow subdomain that is not the brand's official domain
Single-source phishing threat-intelligence hit on the primary domain
Cross-origin requests to api.zofinance.io from an unofficial host
Anonymous free-hosting tenant with typo-ridden legal text ('Privicy Policy') and no verifiable corporate identity
Domain age information unavailable

Details

Page Title

ZO Finance

Scan Type

public

Domain Name Analysis

Domain 'relate-zo-finance.webflow.io' uses the British Indian Ocean Territory country-code top-level domain (.io), featuring subdomain 'relate-zo-finance'. The core label 'webflow' covers 7 characters with two vowels and 5 consonants. Splitting it apart reveals 2 words: web, flow. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://relate-zo-finance.webflow.io/

Page Load Overview

8.12s
Total Load Time
32.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:3,500 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain79% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
79%
technology software
66%
government public service
32%
finance banking
27%
cryptocurrency
22%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
26104.18.36.248Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
26104.18.160.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2618.64.181.11Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
26172.64.151.115Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
26104.18.54.45Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
26104.26.12.177Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
26104.18.161.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
26104.18.50.34Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
26104.26.13.177Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2349--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T167935CAAF950142A860347D4E1F7BB6C216ED096EF074CF4B3AC02A6EF40FEC459E549

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:2oeEJ0N1XaHr54YER4f8Dafarss5kWrY/Efo74R:nJ0axVNfAkSR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:97642:AAPAMFCBABSFNAksoBRB0BIQJAlCaECHZkcKA4BiEIBNgBiFgSQQW0IQATEgKsBITiEMOCA5ZpqGgGKkAAApCmkSCgAZgiMt

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00e0fce0f0f0f0f0
Perceptual Hash:c23e220f3ae4ddcc
Difference Hash:43c1808181c1c1c9
Wavelet Hash:00e0fef0f0f8f0f8
Color Hash:#3a7863

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data