Security Scan Report: www.finvips.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 1 domain to perform 9 HTTP transactions. The main domain is finvips.com and was registered 1 week ago.

Submitted URL: https://www.finvips.com/

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Analyst-vetted fake 'AI trading platform' lead funnel: CRITICAL YARA hit for SMS-verified lead harvesting to /api/leads. Invented brand on a 13-day-old domain — do not submit contact details or connect any brokerage account.

Risk Factors (6)
Matches analyst-vetted known malicious kit (fake AI trading lead funnel, SMS verification for call-centre fraud)
CRITICAL YARA hit AiTrading_LeadFunnel_SmsVerify indicating lead-token exfiltration to /api/leads and phone-risk SDK proxying
Very new domain (13 days) presenting as a financial trading platform with brokerage-connection claims
Unverifiable corporate identity / no regulatory licensing disclosure for an investment service
Inline scripts use encoding/decoding functions
External infrastructure includes random-looking domains (finsy0-dolorum24.cfd, ph.splicer-lane.pro)
Domain age information unavailable

Details

Page Title

Finvips — AI Platform for Quantitative Trading

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.finvips.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'www'. Count 7 characters in 'finvips' containing 2 vowels alongside 5 consonants. Segmentation suggests two words: fin, vips. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.finvips.com/

Page Load Overview

0.61s
Total Load Time
39 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,784 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
70%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.21.48.53Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.178.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.148.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
96--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18E635BA13686101556A3E0E2B3DB7B1DFA2DD103D849C550BAFD46269FC7EE2A173B0C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:0qCGbfQxFhY2pgjnhR4w0SgpVYa23p7rI+iT3uQ/KUrFq9LhN3REyyIQrpPJOo+Z:lfcfZgjnjd0SIed0/K8y7r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:70336:wUEGBWoAhCI2YgMNM+0YWEIABRQhKIQRRNVAZAQZAeEx4ON0MKYyACZZFRgqVAjiGcYBJIPKI4KBLEhUAAEFbNQGGmbQEMCE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0001010103ffff
Perceptual Hash:a30bd8d8cbc9cbc1
Difference Hash:fbffdfdfffff0628
Wavelet Hash:ff0101010307ffff
Color Hash:#6c81e0

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data