Security Scan Report: www.fotrindfindomd.com

Redirected to:
https://fotrindfindomd.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 2 domains to perform 9 HTTP transactions. The main domain is fotrindfindomd.com and was registered 1 month ago.

Submitted URL: https://www.fotrindfindomd.com/

Effective URL:
https://fotrindfindomd.com/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Analyst-vetted malicious kit and a high-precision YARA rule identify this as a fake AI-investment lead funnel that SMS-verifies phone numbers for call-centre fraud. Avoid; do not submit personal or financial data.

Risk Factors (6)
Analyst-vetted malicious kit match (fake AI trading lead funnel, SMS verification for call-centre fraud)
High-precision YARA hit AiTrading_LeadFunnel_SmsVerify on the page body
Unlicensed 'AI investment / capital optimisation' offering with guaranteed instant liquidity claims
Suspicious third-party domains (finly6-et58.cfd, ph.splicer-lane.pro) contacted by page scripts
Domain only 33 days old and absent from Cisco Umbrella top 1M
Network IDS HIGH alert: Spamhaus DROP listed traffic (host reputation)
Domain age information unavailable

Details

Page Title

Fotrind Findomd — Automatisierte Finanzintelligenz für Freelancer

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.fotrindfindomd.com' is registered; it also runs on subdomain 'www'. Count 14 characters in 'fotrindfindomd' with 4 vowels and 10 consonants. Tokenizing the label suggests 5 words: fot, rind, find, om, d. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.fotrindfindomd.com/

Page Load Overview

2.05s
Total Load Time
36 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:4,824 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
70%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5158.94.210.119Amsterdam, North Holland, Netherlands
AS202412Omegatech LTD
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.95.214Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
95--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12D635B923196000552E3A5A7A3DB7B1D6E2ED213C44AC929F6FD4122DFE7ED3A17234C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:dd61wg8q3QxFCWoUEumJwqSgpVYa23p7rI+iT3uQ/KUrFq9LhN3REyyIQrpPJOou:G33c9oUEkqSIed0/K8y7r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:68608:gCE8AFQBvkukICBJE4IA8AkBgOApWCGhAIBYNEI8kIkPGq4UAJICyAURwDkAtpBYQCM0IQIBUAEDaICoYFyHyFFSGmQNImAR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000010107ffff
Perceptual Hash:a20bf198f8cdc3c9
Difference Hash:bbffefefffff1696
Wavelet Hash:ff010101010fffff
Color Hash:#931f3c

Scan History

Scan history not available

Unable to load historical scan data