Security Scan Report: tdinvestmentfunding.com

Redirected to:
http://survey-smiles.com/
Site favicon
Submitted: Sep 22, 2026, 10:47:39 AMCompleted: Sep 22, 2026, 10:48:30 AMpubliccompleted

This website contacted 17 IPs in 5 countries across 10 domains to perform 23 HTTP transactions. The main domain is survey-smiles.com and was registered 29 years ago.

Submitted URL: https://tdinvestmentfunding.com

Effective URL:

http://survey-smiles.com/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

Aged but unranked domain carries a named malware-family threat-intel match and redirects across domains through ad/tracking networks to a survey site, with no legitimate content of its own. Avoid interaction.

Risk Factors (4)
Named malware family indicator (havoc) matched against the entry/primary domain
Cross-domain redirect from an unrelated aged domain to a survey domain
Redirect loop / circular redirect behavior
No Cisco Umbrella ranking for the scanned domain
Safety Factors (5)
No credential, login, disguised-password, or payment forms detected (0 forms)
No JavaScript malware (YARA) patterns detected
No Suricata network IDS alerts detected
No cross-origin credential exfiltration observed
Established domain (3014 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'tdinvestmentfunding.com' uses the commercial generic top-level domain (.com). The second-level label 'tdinvestmentfunding' is 19 characters long containing five vowels alongside 14 consonants. Tokenizing the label suggests 3 words: td, investment, funding. Expect 7 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tdinvestmentfunding.com

Page Load Overview

9.09s
Total Load Time
278 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:72%
Script:Latin
Direction:ltr

Detection Details

Text Length:44 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7208.91.196.145British Virgin Islands
AS40034Confluence Networks Inc
145.82.67.97Naaldwijk, South Holland, Netherlands
AS49981WorldStream B.V.
1172.67.138.86Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
185.9.206.157Frankfurt am Main, Hesse, Germany
AS202053UpCloud Ltd
1195.181.175.41Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
185.9.201.81Frankfurt am Main, Hesse, Germany
AS202053UpCloud Ltd
1212.102.56.178Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
1104.21.26.182Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2317--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18CE2C31906F20421159730309EBF6A8437755A23658CED08BD8C6A40EFADABB4DB7BF4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:+ZBsjBjrAyhtbgt4MiIO/5/9SLOnuzkfi2fS2fiQn:aMMmksi2K2Ke

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:32226:wBwZS1BsBQEABEAQJL2gEbHJfSABmyoLgMBcAycAkQEIEMNoHlBEHHBICAEERJMCEAQUCrHCACYZMpqgWACCAQEApAr+QeNy

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0042c300000000ff
Perceptual Hash:b0649b4a9a4ebb27
Difference Hash:3196969696b2b23b
Wavelet Hash:00e7ffdb421800ff
Color Hash:#d2797e

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data