ScanMalware.com

Security Scan Report: ekstazi.safeswim.cfd

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2495626d-2741-4217-b589-08915f51474fDomain and IP registration (RDAP)/api/v1/rdap/2495626d-2741-4217-b589-08915f51474fHow often this domain was scanned/api/v1/domain/stats/ekstazi.safeswim.cfdScan history for this domain/api/v1/domain/history/ekstazi.safeswim.cfd?limit=15
This website contacted 17 IPs in 3 countries across 13 domains to perform 62 HTTP transactions. The main domain is safeswim.cfd and was registered 1 month ago.

Submitted URL: https://ekstazi.safeswim.cfd

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Counterfeit CepteŞok Market storefront on a 32-day-old, unranked .cfd domain (subdomain 'ekstazi'), reusing the real brand's name, contact details and catalog. No credential/payment fields were captured, but the site is an impersonation and should be avoided.

Risk Factors (5)
Impersonation of a different entity's brand (CepteŞok) on a non-official domain
Unranked, 32-day-old domain hosting a clone of an established retailer
Abusive/suspicious subdomain name and .cfd TLD
Spamhaus DROP-listed traffic flagged by network IDS
Fake shopping flow likely used to collect orders/payment or personal data off-platform
Domain age information unavailable

Details

Page Title

CepteŞok Market - Online Alışveriş

Scan Type

public

Domain Name Analysis

The domain 'ekstazi.safeswim.cfd' uses the .cfd top-level domain; it also runs on subdomain 'ekstazi'. Its registrable label 'safeswim' stretches across 8 characters split between 3 vowels and five consonants. It segments into two words: safe, swim. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

lea CepteŞok Kampanyalar | Kurumsal | Müşteri Hizmetleri Ürün ara a 2 Giriş Yap/Uyeol oOW o,oot N Önerilen Sıralama M Filtreler Kategoriler a Beyaz Eşya & Ankastre Bilgisayar & Tablet Elektrikli Ev...

Page Load Overview

1.55s
Total Load Time
3.4 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:tr
Text Length:3,721 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing/scam40% confidence
Type: dynamic
Method: structural

All Detected Categories

phishing/scam
40%

Detected Features

Search
Products

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14130.12.182.83Slovenia
AS197769VPS Dedicated LLC
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
3104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.16.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
331.3.1.79Frankfurt am Main, Hesse, Germany
AS21245Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi
33.174.51.50Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3104.26.3.173Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
323.194.190.66Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
3157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
6217--

Detected Technologies6

JQueryv3.7.1
100%
Cloudflare
50%
PHPv8.4.27
40%
Nginx
40%
Facebook Pixel
40%
cdnjs
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12804F791A0F32055615350A9FF679A8B7A20E103D285CD057FDC27A4EF8BDE6CD23A9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:dy9ydPvSeaR3uTYdTvDZiQjUYmqYhsOztM4JwRToR6jVgf/w+C3Kqp/8BKOzeXEQ:d9PKeaBuTmPA1VM0AQFZIMZ9N3rrZw/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:176228:QB4LClUAkJicODBCFhwhEAACYUIZAjZwcBgeGNhJNBES0kATigBCJvZSQDRQYJkShAAVaFjgAYAoYhUqCCAxKlFhhA49RGAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffe9fffff9f9ff
Perceptual Hash:e953554c306b6373
Difference Hash:d1620b939bd3938a
Wavelet Hash:00ffc1e3c1f1f1c1
Color Hash:N/A

Other Hashes

Crop Resistant:d1620b939bd3938a,0101010101010100,4149435959434901

Scan History

Scan history not available

Unable to load historical scan data