Security Scan Report: www.nortefondazgo.net

Redirected to:
https://nortefondazgo.net/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 2 domains to perform 7 HTTP transactions. The main domain is nortefondazgo.net and was registered 4 months ago.

Submitted URL: https://www.nortefondazgo.net/

Effective URL:
https://nortefondazgo.net/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Analyst-vetted kit roster identifies this as a fake 'AI trading platform' lead funnel (ai-trading-lead-funnel-2026-10) built on the invented brand 'Norte Fondazgo' to harvest sign-ups and SMS-verified phone numbers for call-centre investment fraud.

Risk Factors (4)
Known malicious phishing kit identified by analyst-vetted kit roster (ai-trading-lead-funnel-2026-10)
Fake investment/trading platform with no licence, company entity or contact information
Multi-language template consistent with bulk-deployed fraud funnels
SMS phone-verification funnel designed to route victims to call-centre fraud operators
Domain age information unavailable

Details

Page Title

Plataforma de Trading Inteligente — Norte Fondazgo

Scan Type

public

Domain Name Analysis

Domain 'www.nortefondazgo.net' uses the network infrastructure generic top-level domain (.net) and includes subdomain 'www'. Count 13 characters in 'nortefondazgo' split between five vowels and eight consonants. Breaking it apart gives four words: norte, fonda, z, go. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

{{ }} Visión _ Ecosistema_ Consultas Conexión [ Explorar) | @es — LIDERAZGO GLOBAL Definiendo el manana con Norte Fondazgo Estamos aquí para acompajiarte en la evolución de soluciones integrales q...

Page Load Overview

13.11s
Total Load Time
37 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:2,646 chars
Detector Agreement:75%

Website Classification

Primary Category

corporate business99% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
99%
government public service
88%
adult content
52%
real estate property
40%
corporate
35%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
788.80.24.133Sweden
AS33837Fredrik Holmqvist
71--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F37329137293102655A3A1E9B3D77B197A2DE003D809C828BBFD47518FD7EDAA1B274C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:GeaARF97eOlYII27/2GUodawTSgpVYa23p7rI+iT3uQ/KUrFq9LhN3REyyIQrpPW:9hR3eOlYII2bdTTSIed0/K8y7r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:79536:hgpRBgBACgkKNguQQgmCARwiZFFws2AAW2bBGuA4hwiFUgEDggohlqiJIEEMG3StYoGKhHG4wEwVqQwAACwQFGQyIAQQBBMw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffdb80808c98f8
Perceptual Hash:fce4c786383cacc1
Difference Hash:26c0333b31313111
Wavelet Hash:ffffd980808888f8
Color Hash:N/A

Other Hashes

Crop Resistant:26c0333b31313111

Scan History

Scan history not available

Unable to load historical scan data