Security Scan Report: danubeglobalmarkets.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 1 domain to perform 6 HTTP transactions. The main domain is danubeglobalmarkets.com and was registered 4 months ago.

Submitted URL: https://danubeglobalmarkets.com/

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Page matches an analyst-vetted fake 'AI trading platform' lead-funnel kit (critical YARA SMS-verify hit) plus an IDS HIGH Spamhaus alert — an investment fraud funnel. Do not submit details.

Risk Factors (6)
Analyst-vetted known malicious kit family match (AI-trading lead-funnel/SMS-verify phishing)
Critical YARA detection of SMS one-time-code verification overlay and lead-token API wrapper in page scripts
IDS HIGH alert for Spamhaus DROP listed traffic
Fake 'AI trading platform' investment theme with no licence, no verifiable corporate identity and vague techno-babble copy
Obfuscated inline JavaScript (encoding/decoding functions) plus obscure external .cfd/.pro hosts
Very low legitimacy score (8/100), unranked domain registered 131 days ago
Domain age information unavailable

Details

Page Title

Predictive Analytics & Automated Execution | Danube Global Markets

Scan Type

public

Domain Name Analysis

Domain 'danubeglobalmarkets.com' uses the commercial generic top-level domain (.com) with no subdomain. Its registrable label 'danubeglobalmarkets' stretches across 19 characters containing 7 vowels alongside 12 consonants. Tokenizing the label suggests three words: danube, global, markets. Expect 6 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://danubeglobalmarkets.com/

Page Load Overview

1.09s
Total Load Time
39 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,448 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business67% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
67%
corporate
35%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2158.94.210.119Amsterdam, North Holland, Netherlands
AS202412Omegatech LTD
1172.67.178.249Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.95.214Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1151.101.1.229Fastly · CDNUnited States
AS54113Fastly, Inc.
65--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10393296631A71025655391EAB3E72B1DBB2CE103C90ACC187AFE07519FCBBD9B52274C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:uLQR3GVFFjPNcFYFqNHQxFnIIu4UGtCAGw/SgpVYa23p7rI+iT3uQ/KUrFq9LhNb:uccFTcG+HcNIIuI//SIed0/K8y7r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:89506:ABgA4hJAAQ/IrNAFDJAAQAhwd0CGgIAiTsAyQG2DHABXAQACSiC0OoKA4kVKJQEJMMTZnCABQAl4IMA1gAIGpF2BIwJpQQA4

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0030f0f0f0707060
Perceptual Hash:c25d391cc3733ac3
Difference Hash:d1e1c1c1c5e5c5c5
Wavelet Hash:00f0f0f9f1f17171
Color Hash:#40acbf

Scan History

Scan history not available

Unable to load historical scan data