Security Report: onemotoring.erp-finx.top - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ddec553d-a217-4037-95d4-aa6d92e0ef44 Domain and IP registration (RDAP)/api/v1/rdap/ddec553d-a217-4037-95d4-aa6d92e0ef44 Certificate Transparency/api/v1/ct/onemotoring.erp-finx.top How often this domain was scanned/api/v1/domain/stats/onemotoring.erp-finx.top Scan history for this domain/api/v1/domain/history/onemotoring.erp-finx.top?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 8 HTTP transactions. The main domain is onemotoring.erp-finx.top and was registered 3 months ago.

Submitted URL: https://onemotoring.erp-finx.top

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Phishing infrastructure: Safe Browsing Social Engineering hit plus a phishing-framework listing on the primary domain, using a hostname impersonating Singapore's OneMotoring service. Do not visit or enter any data.

Risk Factors

Safe Browsing Social Engineering (phishing) hit

Threat-intel match: phishing framework on the primary domain

Brand impersonation of OneMotoring on a mismatched .top domain

Newly registered domain (89 days) with no reputation

IDS alerts for hostile *.top domain traffic

Domain age information unavailable

Details

Page Title

erp-finx.top | 521: Web server is down

Scan Type

public

Domain Name Analysis

You're looking at domain 'onemotoring.erp-finx.top' on the .top top-level domain with subdomain 'onemotoring'. The core label 'erp-finx' covers 8 characters split between 2 vowels and 5 consonants, notching one hyphen. Segmentation suggests 3 words: erp, fin, x. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.89s

Total Load Time

23 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:692 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical75% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

75%

technology software

68%

government public service

49%

cryptocurrency blockchain

46%

news media journalism

34%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	2	-	-

Detected Technologies4

X-UA-Compatible

100%

Cloudflare Bot Management

70%

HTTP/3

40%

Cloudflare

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ECE16671F1B5127B10A381A23695EB6A79E0C617CBEF4594B3DCC2632F9EE81E903254

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:ljHjCIjuKDa/D2KUuYG4Fh8/G4FBr8424Ffw+skKmk2OLwmNnwL5kFR23RaQxJ:ljHjDjuCa/CqYeRiVO/Q85kFc3ceJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6986:UwoFGBIBQCgEpQERkgUgBwBIBxhGAwCUQADhMMAOrfSEoKzwLRQEAAxAACUgjJioBApAZqAAQoYQiDgl4KlADWgRICEJAIYE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c70000d7f7ffff

Perceptual Hash:b4389abc9a676531

Difference Hash:1c3e8e8a3406061c

Wavelet Hash:c7000000d7f3f7ff

Color Hash:#87c2c5

Other Hashes

Crop Resistant:1c3e8e8a3406061c

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: onemotoring.erp-finx.top