Security Scan: Kirjanpito Fennoa taloushallinanohjelmistolla

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6bde4efd-a2d5-42a3-91e5-fe4ed1be55cb Domain and IP registration (RDAP)/api/v1/rdap/6bde4efd-a2d5-42a3-91e5-fe4ed1be55cbHow often this domain was scanned/api/v1/domain/stats/vinst.fi Scan history for this domain/api/v1/domain/history/vinst.fi?limit=15

This website contacted 18 IPs in 4 countries across 14 domains to perform 82 HTTP transactions. The main domain is vinst.fi and was registered 7 years ago.

Submitted URL: https://vinst.fi

Effective URL:

https://www.vinst.fi/

Redirected

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Legitimate Finnish accounting site compromised with an IClickFix/EtherHiding loader: obfuscated script pulls a next stage from an Ethereum Sepolia contract and ClickFix lure hosts. Do not visit or run any prompts.

Risk Factors (4)

Injected ClickFix/EtherHiding loader on a compromised legitimate website — Windows visitors are lured to run attacker-supplied code

Malicious JavaScript obfuscated to conceal blockchain RPC / threat-feed hosts (sepolia.gateway.tenderly.co, 1rpc.io, zvh3.com)

Multiple CRITICAL network IDS malware alerts (ClickFix domain queries/SNI, EtherHiding exfiltration)

Threat-intelligence reports of a malware 'unknown loader' on the primary domain and of iclickfix malware served from a linked resource

Domain age information unavailable

Details

Page Title

Kirjanpito Fennoa taloushallinanohjelmistolla – ajantasainen ja huoleton taloushallinto Vinstiltä

Scan Type

public

Favicon Hash

MMH3: 1593299028

MD5: a3d6d0d0c06e3719c814e893055d147e

Domain Name Analysis

You're looking at domain 'vinst.fi' on the Finnish country-code top-level domain (.fi). The second-level label 'vinst' is 5 characters long containing 1 vowel alongside 4 consonants. Splitting it apart reveals three words: v, in, st. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.53s

Total Load Time

2.4 MB

Total Size

Language Analysis

Primary Language

🇫🇮Finnish

Code: fi

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fi

Text Length:7,843 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence

Type: spa

Method: structural

All Detected Categories

corporate

70%

news/blog

40%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	5.44.245.38	Finland	AS201692Zoner Oy
4	18.66.122.52Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
4	3.160.150.110Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
4	74.125.29.95Google · CDN	United States	AS15169Google LLC
4	99.84.149.198Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
4	142.251.20.94Google · CDN	United States	AS15169Google LLC
4	192.0.77.48	San Francisco, California, United States	AS2635Automattic, Inc
4	54.76.78.156Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
4	18.66.122.127Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
4	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
82	18	-	-