Security Scan Report: m.nordeagroupfunds.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 17 IPs in 2 countries across 11 domains to perform 31 HTTP transactions. The main domain is nordeagroupfunds.com and was registered 1 week ago.

Submitted URL: https://m.nordeagroupfunds.com

AI Security Verdict

Moderate Risk

Confidence: 60%

6
Risk Score

New, unranked fixed-deposit lead-gen site with a hostname echoing a bank brand but self-branded differently; no credential or payment forms, but personal/financial data collection and unrealistic yield claims warrant caution.

Risk Factors (5)
Five-day-old domain with an untraceable operator
Domain name evokes another financial institution's brand while the displayed brand differs
Collection of personal and financial-intent data (contact details, investment amount) on an unidentified site
Aggressive above-market yield and bonus claims typical of lead-generation funnels
No verified business entity details, address or legal registration visible
Safety Factors (5)
No password, disguised-password or payment fields on the page
Forms submit same-origin; no cross-origin credential handling or exfiltration detected
No IoC, hunting rule, Safe Browsing or IDS phishing/malware alerts
Honeypot and form-timing fields present, indicating standard anti-bot form handling
Third-party scripts limited to common analytics/advertising/CDN hosts
Domain age information unavailable

Details

Page Title

Festgeld anlegen – Zinsen vergleichen und sicher investieren | Festgeldtrend

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'm.nordeagroupfunds.com' is registered, featuring subdomain 'm'. Count 16 characters in 'nordeagroupfunds' split between 6 vowels and 10 consonants. It segments into 4 words: nord, ea, group, funds. Median word length is 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://m.nordeagroupfunds.com

Page Load Overview

1.93s
Total Load Time
2.4 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:10,793 chars
Detector Agreement:80%

Website Classification

Primary Category

finance banking66% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
66%
corporate
35%
technology software
29%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1595.129.234.10Russia
AS57724Ddos-guard Ltd
1104.18.18.62Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.20.97Google · CDNUnited States
AS15169Google LLC
1104.26.3.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.19.62Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.68.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1216.239.34.36Google · CDNUnited States
AS15169Google LLC
1142.251.14.157Google · CDNUnited States
AS15169Google LLC
3117--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T146D3A53062F119BB9097C2F1BB64BB2A69AAE34BC50F8159F2DC06A15FC7CD19C1365C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:6c5pOjBhxef3/SewsJUipTiPD7PhCxr/0DiE/B9f9jTd0evnfgbEwi5XLdaIG+:6c5pOjBhxefvTGJc5/WiEZZ9nU+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:141720:ADswhCSkJBgEjgcEFXAIRkEWIlI4MOQMoDcL+oMAYJUgrpBAobIhbIiDJGZIiwQREOVSpkpGwBAFTAxJQUgRGhkLQbtAA1Sl

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000000000ffff
Perceptual Hash:e24db512e53c16e5
Difference Hash:96c1c79393198d0c
Wavelet Hash:ff700001400effff
Color Hash:09006000080

Scan History

Scan history not available

Unable to load historical scan data