Security Scan Report: install.openfin.co

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 3 domains to perform 14 HTTP transactions. The main domain is openfin.co and was registered 13 years ago.

Submitted URL: https://install.openfin.co

The Cisco Umbrella rank of the primary domain is #108,341 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Legitimate OpenFin installer generator on OpenFin's own long-established domain. Configuration-only form with no credential or payment fields, no impersonation, and no threat-intelligence, hunting rule, or IDS hits.

Safety Factors (5)
12-year-old established domain with continuous registration history
Self-branding matches the domain (install.openfin.co / OpenFin Installer Generator)
Form collects installer configuration parameters (OS, config URL, app name, icon, support email), not credentials or payment data
Form action is same-origin (/download); no cross-origin submission
Ranked inside Cisco Umbrella top 1M (#108,341), consistent with a niche B2B software tool
Domain age information unavailable

Details

Page Title

OpenFin Installer Generator

Scan Type

public

Domain Name Analysis

You're looking at domain 'install.openfin.co' on the Colombian country-code top-level domain (.co) and includes subdomain 'install'. Its registrable label 'openfin' stretches across 7 characters with 3 vowels and four consonants. It segments into two words: open, fin. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://install.openfin.co

Page Load Overview

1.63s
Total Load Time
983 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:25%
Script:Latin
Direction:ltr

Detection Details

Text Length:2,573 chars
Detector Agreement:33%

Website Classification

Primary Category

technology software27% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
613.223.153.252Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
254.92.152.240Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
252.23.34.208Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
145--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CEA2953A51F10933026301E637BA57A63E76915FD64B96447AEC8B801FC2C52D62F3EE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:OooT1fWoIvYZav3BVlrXNdXtwazIisPJUJeAs6kDe+6JTlpG9UVCIwm0WcYuVk6V:ODTeQZgNNnEiG1AszDetJTX6eNs+VO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:22327:eIDpsjihKlFEKJvDAGNBEvCCtgDBKRsDQGmOBQgWAwCgAiQEASRgwmA6EC8BUsDCSAGTx4MjmAQC2qVhQhXgCFA2AMlEg2Tk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:43c3cfdfffffc3c3
Perceptual Hash:b133648ecc8b9b8d
Difference Hash:9e1e1c1014181616
Wavelet Hash:03c3cfc3c3c7c3c2
Color Hash:N/A

Other Hashes

Crop Resistant:9e1e1c1014181616

Scan History

Scan history not available

Unable to load historical scan data