Security Scan Report: www.ftm.eu

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 3 countries across 4 domains to perform 48 HTTP transactions. The main domain is ftm.eu.

Submitted URL: https://www.ftm.eu/articles/us-drops-case-in-nato-corruption-scandal

AI Security Verdict

Safe Website

Confidence: 88%

0
Risk Score

Legitimate investigative-journalism article on Follow the Money's own domain; the password field is the site's own subscription signup, and no threat-intel, YARA or IDS signals were found.

Safety Factors (5)
Self-branding: domain, title and og:site_name consistently identify Follow the Money
News article context (og:type=article) with author bylines and editorial structure
Registration form posts to the same origin and captures no payment data
No Indicators of Compromise, YARA matches, IDS alerts or malicious kit signatures
Unranked analytics script hosts (insight.ftm.nl, eventor.ftm.nl) are the publisher's own .nl domains used via sendBeacon — normal analytics, no tampering signs
Domain age information unavailable

Details

Page Title

U.S. pulls plug on major NATO corruption probes – top suspects walk free - Follow the Money - Platform for investigative journalism

Scan Type

public

Domain Name Analysis

The domain 'www.ftm.eu' uses the .eu country-code top-level domain with subdomain 'www'. The core label 'ftm' covers 3 characters holding 0 vowels versus 3 consonants. Breaking it apart gives 1 word: ftm. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.ftm.eu/articles/us-drops-case-in-nato-corruption-scandal

Page Load Overview

1.52s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-GB
Text Length:7,830 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog50% confidence
Type: webapp
Method: ml+structural

All Detected Categories

news/blog
50%
corporate
35%
social media network
31%
news media journalism
25%

Detected Features

Login Form
Search
Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12185.111.111.154Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
9104.18.128.216Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
985.10.138.139Netherlands
AS20857Signet B.V.
978.46.142.124Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
9104.17.31.174Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
485--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E0C3F944B1F425770003A2D4AEB3E76AFA915617E7810C00B2ED43E81FE7E67895B75E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:B1u6LHtdemOSnxHtdemOSnTVj7HmdG6KZ8nHmdG6KZ8iHmdG6KZ8nHmdG6KZ8F5e:BQ6FVju4eHUz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:121137:wMmha0kAIuizABpgigZCFAAS4AAHFEECckcligMEADswDLAAYASiF5AWAhQ9taGQCBQZgTbJqoEHQdIeAGDhZwgYwBYPjiwC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff181c1c0400
Perceptual Hash:99ee63944cc9c8b6
Difference Hash:06aeb2b2b0b0d8d8
Wavelet Hash:ffffff181c1c0000
Color Hash:#8479d2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data