ScanMalware.com

Security Scan Report: www.floreduxia.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/84ee7d34-1081-4ef6-bd33-a30c528214c4Domain and IP registration (RDAP)/api/v1/rdap/84ee7d34-1081-4ef6-bd33-a30c528214c4How often this domain was scanned/api/v1/domain/stats/floreduxia.comScan history for this domain/api/v1/domain/history/floreduxia.com?limit=15
This website contacted 6 IPs in 1 country across 1 domain to perform 9 HTTP transactions. The main domain is floreduxia.com and was registered 1 month ago.

Submitted URL: https://www.floreduxia.com/

AI Security Verdict

High Risk

Confidence: 90%

8
Risk Score

Analyst-vetted malicious kit match plus a critical YARA signature: this 'Florédux IA' AI-crypto page runs an investment-scam lead funnel that harvests sign-ups and phone numbers for SMS verification and call-centre fraud.

Risk Factors (5)
Known malicious kit roster identification (AI trading investment lead funnel with SMS verification)
Critical high-precision YARA match on page HTML
SMS/phone-verification lead harvesting for call-centre fraud
40-day-old domain, unranked, invented brand with no verifiable company, licence or address
Suspicious third-party script/data hosts unrelated to the site's own domain
Domain age information unavailable

Details

Page Title

Florédux IA — plateforme IA pour analyser la crypto

Scan Type

public

Domain Name Analysis

Domain 'www.floreduxia.com' uses the commercial generic top-level domain (.com), featuring subdomain 'www'. Count 10 characters in 'floreduxia' containing 5 vowels alongside five consonants. Breaking it apart gives 3 words: flore, du, xia. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.floreduxia.com/

Page Load Overview

0.52s
Total Load Time
40 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:4,289 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate35% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate
35%
cryptocurrency blockchain
29%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.26.136Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.148.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
96--

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C8633A653696100962B3D0E6A3AB7B1EB91CD103C845C055FAFD8662AFC7EE7A13374C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:RxzT8fs+Eb494fcjIIGsT6JUiAEcceSIed0/K8y7r:tb40cYxvo/KL7r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:72888:KQEQAMuDBAsZSDWJYSMiLSARwWKshuAxALQEEQQSkJgsBiQgAAUXhfAeDBhMgCCkUBAPIVApTcICIBAQh4kGLpBsEGNFSN4C

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff01030303031fff
Perceptual Hash:8829c90bf9e9f8c9
Difference Hash:fbffbfbfffffff37
Wavelet Hash:ff03030307070fff
Color Hash:#e06cd8

Other Hashes

Crop Resistant:fbffbfbfffffff37,ffff8fcfffffffff

Scan History

Scan history not available

Unable to load historical scan data