Security Report: futuregrameen.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3f40a6e5-53b8-4bd1-bfcc-c8fd663ba5fc Domain and IP registration (RDAP)/api/v1/rdap/3f40a6e5-53b8-4bd1-bfcc-c8fd663ba5fc Certificate Transparency/api/v1/ct/futuregrameen.com How often this domain was scanned/api/v1/domain/stats/futuregrameen.com Scan history for this domain/api/v1/domain/history/futuregrameen.com?limit=15

This website contacted 16 IPs in 3 countries across 14 domains to perform 65 HTTP transactions. The main domain is futuregrameen.com and was registered 9 years ago.

Submitted URL: https://futuregrameen.com

Effective URL:

https://www.futuregrameen.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate 4-year-old finance site compromised with an IClickFix/EtherHiding ClickFix kit; YARA kit match, 5 critical malware IDS alerts and obfuscated blockchain stage loader serve malware to visitors.

Risk Factors (5)

Known malicious ClickFix/EtherHiding kit injected into the page (analyst-vetted kit roster, critical)

Multiple CRITICAL IDS malware alerts for ClickFix and EtherHiding exfiltration traffic

Obfuscated inline script decodes to threat-feed hosts and a blockchain-based stage loader

Third-party resource zvh3.com flagged as iclickfix malware by two independent feeds

Site appears compromised and is used as a malware distribution vector for its visitors

Domain age information unavailable

Details

Page Title

Future Grameen - Credit, Investment and Finance Company in Sri Lanka

Scan Type

public

Favicon Hash

MMH3: -875612036

MD5: fd82ddc83f5661b2708d870f68956960

Domain Name Analysis

The domain 'futuregrameen.com' uses the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'futuregrameen' spans 13 characters holding 6 vowels versus seven consonants. It segments into two words: future, grameen. Average segment length settles at 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

10.08s

Total Load Time

2.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:4,603 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business53% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

53%

corporate

35%

government public service

32%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	178.63.100.111	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
4	142.251.110.97Google · CDN	United States	AS15169Google LLC
4	162.244.93.3	United States	AS965Webhosting Holdings LLC
4	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
4	216.239.32.36Google · CDN	United States	AS15169Google LLC
4	23.194.190.151Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
4	20.250.198.32Azure · CLOUD	Zurich, Zurich, Switzerland	AS8075Microsoft Corporation
4	150.171.109.104Azure · CLOUD	United States	AS8075Microsoft Corporation
4	172.64.146.215Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
65	16	-	-