Security Scan Report: rmm.fastmoneyclaim.com

Redirected to:
https://rmm.fastmoneyclaim.com/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 2 domains to perform 10 HTTP transactions. The main domain is fastmoneyclaim.com and was registered 11 months ago.

Submitted URL: https://rmm.fastmoneyclaim.com

Effective URL:
https://rmm.fastmoneyclaim.com/login
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Fleet login page on a host flagged as 'unknown rat' malware by two independent threat feeds; parent domain also flagged. No confirmed credential exfiltration, but the malware intelligence warrants avoiding login.

Risk Factors (4)
Multi-source corroborated content-malware (RAT) indicator on the exact scanned host
Secondary single-source malware indicator on the parent domain
Publicly exposed Fleet/RMM login endpoint on a domain absent from Cisco Umbrella top 1M
Very low business-legitimacy score (10/100) with no verifiable organisational presence
Domain age information unavailable

Details

Page Title

Dashboard | Fleet

Scan Type

public

Domain Name Analysis

Domain 'rmm.fastmoneyclaim.com' uses the commercial generic top-level domain (.com) and includes subdomain 'rmm'. The core label 'fastmoneyclaim' covers 14 characters containing 5 vowels alongside nine consonants. Tokenizing the label suggests three words: fast, money, claim. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Welcome to Fleet Email Email Password Password Forgot password?

Page Load Overview

5.93s
Total Load Time
1004 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:70%
Script:Latin
Direction:ltr

Detection Details

Text Length:73 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software34% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
34%
e-commerce shopping
29%
corporate business
27%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
580.76.49.171Edison, New Jersey, United States
AS39948612651980 CANADA INC.
5192.0.73.2San Francisco, California, United States
AS2635Automattic, Inc
102--

Detected Technologies4

Nginxv1.24.0
40%
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AC827690B40C12746D3FAA10DEC8972CD125F842AF634826710D088EEAD7FF635E5F9A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:sQOx05nrGPKJgg8T4xksc64Jysq7vdbSfNQ9:sx0rGV4xksc64Jysq7vdefNQ9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18998:IzIqtLIKSELpAgkJOhAC0AKAigRE2HFGEGQYFYAoNBREImHrIClIBBQhFhIEIMIwlUgiADl4DlcBFEBlEdCI0gUTAnQxBKAF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0008e7e7ffffffff
Perceptual Hash:b33319cc6666cccc
Difference Hash:92101c0c00000000
Wavelet Hash:0000c3c3f0f0f0f0
Color Hash:07000000e00

Other Hashes

Crop Resistant:92101c0c00000000

Scan History

Scan history not available

Unable to load historical scan data