Security Scan Report: www.finorimex.org

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 1 domain to perform 9 HTTP transactions. The main domain is finorimex.org and was registered 1 week ago.

Submitted URL: https://www.finorimex.org/

AI Security Verdict

High Risk

Confidence: 90%

8
Risk Score

Roster-confirmed fake 'AI trading platform' lead funnel: an unranked 12-day-old site using SMS phone verification and email capture to feed call-centre investment fraud. Matches YARA AiTrading_LeadFunnel_SmsVerify.

Risk Factors (5)
Known malicious kit family (AI trading lead funnel with SMS verification) confirmed by analyst-vetted roster and YARA rule
Lead-collection funnel designed to capture contact details for follow-up call-centre fraud
Contact details sent to unranked third-party endpoints via cross-origin fetch
Very new domain (12 days) with no verifiable corporate identity, registration or financial authorisation
Investment-performance framing with illustrative 'report' data while disclaiming any guaranteed result
Domain age information unavailable

Details

Page Title

Finorimex — Piattaforma AI per l'analisi finanziaria quotidiana

Scan Type

public

Domain Name Analysis

The domain name 'www.finorimex.org' uses the non-profit oriented generic top-level domain (.org) with subdomain 'www'. The registrable portion 'finorimex' spans 9 characters holding four vowels versus five consonants. Splitting it apart reveals 3 words: fin, ori, mex. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.finorimex.org/

Page Load Overview

0.84s
Total Load Time
41 KB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it
Text Length:6,862 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
70%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.11.224Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.148.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
96--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C0735C6275860015A673E196A3ABB70DF92DD107E8469460BBFD4325CFCBEE6A13730C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:wXb6vtENe+LwGBp+oLhQQc93IIshiQQB8zsNWt3SIed0/K8y7r:Mc9aztX/KL7r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:80609:IBEjIYoYgIAhqpVJEY4IiQJIpGJEEKWaBAhqVwFpJMItuBAGhuCBUaohAMegkBHBoI2IUQiWAEEiBsKENZABUlYyAgJEkYIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fb000c0d0003ffff
Perceptual Hash:9b13ec6c91c9d1c3
Difference Hash:7bddd9d9d9e7273c
Wavelet Hash:ff000c0c000fffff
Color Hash:#2dd24e

Scan History

Scan history not available

Unable to load historical scan data