Security Scan Report: www.firmereditaje.org

Redirected to:
https://firmereditaje.org/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 2 domains to perform 9 HTTP transactions. The main domain is firmereditaje.org and was registered 1 month ago.

Submitted URL: https://www.firmereditaje.org/

Effective URL:
https://firmereditaje.org/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake 'AI trading platform' lead-funnel page matching an analyst-vetted phishing kit (SMS-verify lead harvesting); no forms, but CRITICAL YARA and roster hits confirm malicious intent.

Risk Factors (6)
Known malicious investment lead-funnel kit identified by analyst-vetted roster
CRITICAL YARA rule AiTrading_LeadFunnel_SmsVerify matching SMS verification/lead-token exfiltration code
Brand-new domain (40 days) making financial-return claims with no corporate identity or regulatory licence
Obfuscated inline JavaScript with encoding/decoding routines
Opaque third-party infrastructure domains (.cfd, .pro) contacted by page scripts
HIGH network IDS alert: ET DROP Spamhaus DROP Listed Traffic Inbound
Domain age information unavailable

Details

Page Title

Firmer Editaje — Plataforma de IA para análisis de mercado

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.firmereditaje.org' on the non-profit oriented generic top-level domain (.org) with subdomain 'www'. The core label 'firmereditaje' covers 13 characters containing 6 vowels alongside seven consonants. Breaking it apart gives four words: firmer, edit, a, je. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.firmereditaje.org/

Page Load Overview

1.97s
Total Load Time
36 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:4,957 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical78% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
78%
corporate business
70%
adult content
68%
technology software
66%
government public service
60%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5158.94.210.119Amsterdam, North Holland, Netherlands
AS202412Omegatech LTD
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.148.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
95--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11A6339563589001562F3A096B39F771EB92CE107AC49C499FAFD4621AFCBEE6D13630C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:TuH/1tYLKhDlFscXIIuMlnsdD/mOSIed0/K8y7r:MlSc1ls5/m4/KL7r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:73122:g7hG41gxDRxkQQKEQIHGbBEAEAAF0ELCFqwFYEYLEFGpcxUTYCIQCWqRwB0goFDYcgA1OCsngQZxhZIzYggIzAJBOIgBBX3C

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff001810000000ff
Perceptual Hash:8ac9e3e1cbcac9c8
Difference Hash:230d716175916111
Wavelet Hash:ff013939310131ff
Color Hash:#7e2d86

Scan History

Scan history not available

Unable to load historical scan data