ScanMalware.com

Security Scan Report: click.mf.moneyflexer.com

Redirected to: https://moneyflexer.com/terms-conditions/

Site favicon
Submitted: Nov 6, 2025, 2:48:44 AMCompleted: Nov 6, 2025, 2:49:32 AMpubliccompleted
Loading additional data...

Summary

This website contacted 6 IPs in 1 country across 3 domains to perform 19 HTTP transactions. The main domain is moneyflexer.com and was registered NaN years ago.

Submitted URL: https://click.mf.moneyflexer.com/?qs=b3ad02a4b6c0cb6244cffb70ad0c66aedad631016d860fd607f887de89944a35f294c51f4996ff11a6873fcf400b545a6064dcb9f254ba54

Effective URL: https://moneyflexer.com/terms-conditions/Redirected

AI Security Verdict

High Risk

Confidence: 92%

10
Risk Score

High‑risk phishing site impersonating known brands; do not trust.

Risk Factors
Brand impersonation on a recently registered, low‑reputation domain
Unranked domain suggests low visibility and possible malicious intent
New domain age (< 180 days) increases likelihood of scam activity
Domain age information unavailable

Details

Page Title

Terms & Conditions - Money Flexer Money Flexer

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

legitimate website

(53%)

Domain Information

The domain name 'click.mf.moneyflexer.com' uses the commercial generic top-level domain (.com) with subdomain 'click.mf'. Its registrable label 'moneyflexer' stretches across 11 characters with 4 vowels and 7 consonants. Breaking it apart gives three words: money, flex, er. Median word length is 4 characters. 'money' most often appears in Danish. You may catch it in Norwegian and Icelandic as well.

Screenshot

Security scan screenshot of https://click.mf.moneyflexer.com/?qs=b3ad02a4b6c0cb6244cffb70ad0c66aedad631016d860fd607f887de89944a35f294c51f4996ff11a6873fcf400b545a6064dcb9f254ba54

Page Load Overview

16.36s
Total Load Time
19
HTTP Requests
3
Domains
162 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:12,422 chars
Detector Agreement:100%

Website Classification

Primary Category

legitimate website53% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

legitimate website
53%
e-commerce
48%
other
37%
corporate
35%

Detected Features

Search
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4128.245.144.14United States
AS14340SALESFORCE
3104.16.174.226United States
AS13335CLOUDFLARENET
3104.16.175.226United States
AS13335CLOUDFLARENET
369.57.163.105United States
AS22612NAMECHEAP-NET
32606:4700::6810:aee2United States
AS13335CLOUDFLARENET
32606:4700::6810:afe2United States
AS13335CLOUDFLARENET
196--

Detected Technologies7

WordPressv6.8.3
100%
Open-Graph-Protocolvarticle
100%
MetaGenerator
100%
Bootstrapv6.8.3
100%
PHP
50%
MySQL
50%
jsDelivr
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T167532B33E1411026225B43A69197B368FA6A9016DF0F9FF675FC31688B85EFB047369C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:47bTapdIZrYvMwTUy5aXwWH27J9Pdwy+Cb:47b2mVkUy5aXwWHeJl9bb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:60892:koYGdsAgcRE6AAwBQgSKSgAAgxIHzFJCBIDaqUZChCAkUkLTDUAAAhK2RSUAD2aK8woMEgZVCARtCG6SRcIiEhQSA4RJXJWA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:387f3f2729010701
Perceptual Hash:8b8507074a076bff
Difference Hash:e2f065c541d577c9
Wavelet Hash:38ff3f7f09070301
Color Hash:#d22d96

Other Hashes

Crop Resistant:e2f065c541d577c9

Scan History

Scan history not available

Unable to load historical scan data