ScanMalware.com

Security Scan Report: cnfgeouygw.biz

Redirected to:
https://www.cnfgeouygw.biz/en-eu
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/44e6b07f-afb6-4404-b2b7-4aa4cd360541Domain and IP registration (RDAP)/api/v1/rdap/44e6b07f-afb6-4404-b2b7-4aa4cd360541How often this domain was scanned/api/v1/domain/stats/cnfgeouygw.bizScan history for this domain/api/v1/domain/history/cnfgeouygw.biz?limit=15
This website contacted 11 IPs in 3 countries across 10 domains to perform 139 HTTP transactions. The main domain is cnfgeouygw.biz and was registered 5 months ago.

Submitted URL: https://cnfgeouygw.biz/

Effective URL:
https://www.cnfgeouygw.biz/en-eu
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Random .biz domain presenting itself as OKX Europe with OKX branding, unranked and flagged by Safe Browsing for social engineering. Brand impersonation; do not enter credentials or funds.

Risk Factors (5)
Brand impersonation of OKX Europe on a non-official, random-string .biz domain
Google Safe Browsing Social Engineering detection on the page
Unranked domain with no established reputation while claiming a major crypto exchange brand
Machine-generated hostname (cnfgeouygw.biz) inconsistent with legitimate operator naming
Obfuscated-looking external infra and redirect chain (2 redirects) to reach the branded landing page
Domain age information unavailable

Details

Page Title

Buy Bitcoin & Crypto | Crypto Exchange, App & Wallet | OKX Europe

Scan Type

public

Domain Name Analysis

Within the business-focused generic top-level domain (.biz), 'cnfgeouygw.biz' is registered without a subdomain. The second-level label 'cnfgeouygw' is 10 characters long containing 3 vowels alongside seven consonants. It segments into six words: c, nf, geo, u, yg, w. Expect 1.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cnfgeouygw.biz/

Page Load Overview

5.02s
Total Load Time
3.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-de
Text Length:5,142 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain79% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
79%
technology software
59%
government public service
37%
corporate
35%
documentation technical
25%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19170.33.96.18Singapore
AS134963Alibaba Cloud (Singapore) Private Limited
1247.242.161.22Hong Kong, Hong Kong
AS45102Alibaba (US) Technology Co., Ltd.
1213.226.244.65Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1213.226.244.61Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1213.226.244.43Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1213.226.244.72Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1291.235.133.121United States
AS30286ThreatMetrix Inc.
12172.64.155.119Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1291.235.132.130United States
AS30286ThreatMetrix Inc.
1291.235.134.131United States
AS30286ThreatMetrix Inc.
13911--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FFE3B4366800263FC7A35388B0267749F926691FFEA788ECF16C8B744BD9BD60C1454B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:XtGFvhtQfi653lY1T3zIzhhJpMwiW+Tk57AvVYX77FN81puGVdCz9JAnhmGffs7u:Xiv+Yf6UdoqRVq5uDcYv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:152079:VGIBCBAAwxJrYgaVS0QgQswJEAQFoOHgKAlKCDXMImCCB6AYbkGaxAkUOAiQARZyZ6IClGIEAmrlAhAwSK4lUsQISAaoQBDN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8301c145e5410101
Perceptual Hash:e2750f55e075e0f0
Difference Hash:05018d8d8d8101d9
Wavelet Hash:f70147677741017d
Color Hash:N/A

Other Hashes

Crop Resistant:630b2b0b0b030bc3,05018d8d8d8101d9

Scan History

Scan history not available

Unable to load historical scan data