Security Report: fedex.leqaw.cfd - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/40bedd70-e7d8-43d9-b761-c35d4729e258 Domain and IP registration (RDAP)/api/v1/rdap/40bedd70-e7d8-43d9-b761-c35d4729e258How often this domain was scanned/api/v1/domain/stats/fedex.leqaw.cfd Scan history for this domain/api/v1/domain/history/fedex.leqaw.cfd?limit=15

This website contacted 5 IPs in 2 countries across 4 domains to perform 14 HTTP transactions. The main domain is leqaw.cfd and was registered 5 days ago.

Submitted URL: https://fedex.leqaw.cfd/com.us/

Effective URL:

https://fedex.leqaw.cfd/com.us/#/index

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

FedEx-branded phishing kit on a 1-day-old .cfd domain: fake delivery-exception page pushing users to 'update address', flagged by Safe Browsing (social engineering) and an IDS FedEx phishing signature.

Risk Factors (6)

Brand impersonation of FedEx on a non-FedEx domain (leqaw.cfd) registered 1 day ago

Google Safe Browsing social-engineering detection

IDS phishing landing signature specific to FedEx

Obfuscated JavaScript with hidden external IP-lookup hosts

Fabricated delivery-exception narrative designed to harvest recipient address/personal details

Domain unranked in Cisco Umbrella while claiming a top global brand

Domain age information unavailable

Details

Page Title

FedEx | Tracking

Scan Type

public

Favicon Hash

MMH3: 2070771852

MD5: f9f3a4bf508eec8270bf7c8fe4397384

Domain Name Analysis

You're looking at domain 'fedex.leqaw.cfd' on the .cfd top-level domain with subdomain 'fedex'. The second-level label 'leqaw' is 5 characters long split between two vowels and 3 consonants. Word splitting yields three words: le, q, aw. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.11s

Total Load Time

477 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:3,023 chars

Detector Agreement:100%

Website Classification

Primary Category

phishing/scam40% confidence

Type: dynamic

Method: structural

All Detected Categories

phishing/scam

40%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	47.89.137.76	United States	AS45102Alibaba (US) Technology Co., Ltd.
2	104.26.13.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.69.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	146.75.121.91Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
2	104.26.12.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	5	-	-