Security Scan Report: principiaskincarepro.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 1 domain to perform 8 HTTP transactions. The main domain is principiaskincarepro.com and was registered 2 weeks ago.

Submitted URL: https://principiaskincarepro.com/

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Confirmed fake AI trading platform: roster-vetted lead-funnel kit (SMS phone verification, /api/leads token) matched by CRITICAL YARA on a 19-day-old domain, with scripts fetching unranked external hosts. Do not submit details.

Risk Factors (6)
Confirmed malicious kit identification (fake AI trading lead funnel with SMS one-time-code phone verification)
CRITICAL high-precision YARA match on the page HTML (AiTrading_LeadFunnel_SmsVerify)
Lead-token XHR and phone-risk SDK proxying to unranked external hosts
Brand name ('Skincare Pro') unrelated to the financial-trading service actually advertised — deceptive positioning
Domain registered 19 days ago and absent from Cisco Umbrella top 1M
Network IDS HIGH alert: ET DROP Spamhaus DROP Listed Traffic Inbound
Domain age information unavailable

Details

Page Title

Principia Skincare Pro — AI Platform for Unified Market Analysis

Scan Type

public

Domain Name Analysis

You're looking at domain 'principiaskincarepro.com' on the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'principiaskincarepro' stretches across 20 characters with 8 vowels and twelve consonants. It segments into four words: principia, skin, care, pro. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://principiaskincarepro.com/

Page Load Overview

1.20s
Total Load Time
36 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:5,068 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical46% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

healthcare medical
46%
technology software
38%
corporate
35%
government public service
34%
finance banking
33%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4158.94.210.119Amsterdam, North Holland, Netherlands
AS202412Omegatech LTD
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.148.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
85--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T137735B91369208155AB391E6B3DB7B0DBE2DE10399868894F6FD46359FC3EE6903370C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:12ESoRTzoRqQxFOIIMfOX8DrmwnSgpVYa23p7rI+iT3uQ/KUrFq9LhN3REyyIQrA:PSoiqckIIMGMHnSIed0/K8y7r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:74185:SYwBCiAWACoJsIaBkhRlAwiLBQggKfEAAUAlX17BEAk2zEkQEiAZiESggFTIDpE8wFKUqcBPbZI4AhQELgBEACAtIiipwhYI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff003020000000ff
Perceptual Hash:cac999b9c9c9c9c8
Difference Hash:2b35c5c149e5e509
Wavelet Hash:ff017171217101ff
Color Hash:#61d22d

Scan History

Scan history not available

Unable to load historical scan data