Security Report: fedex.bkeva.cfd - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4b163f90-24fd-4596-8fa8-cc985159bb9b Domain and IP registration (RDAP)/api/v1/rdap/4b163f90-24fd-4596-8fa8-cc985159bb9bHow often this domain was scanned/api/v1/domain/stats/fedex.bkeva.cfd Scan history for this domain/api/v1/domain/history/fedex.bkeva.cfd?limit=15

This website contacted 4 IPs in 2 countries across 4 domains to perform 14 HTTP transactions. The main domain is bkeva.cfd and was registered 5 days ago.

Submitted URL: https://fedex.bkeva.cfd/com.us/

Effective URL:

https://fedex.bkeva.cfd/com.us/#/index

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

FedEx-branded phishing page on a 1-day-old impostor domain using a fake delivery-exception lure plus obfuscated IP-profiling scripts; Safe Browsing and IDS both flag it. Do not enter any details.

Risk Factors (6)

Brand impersonation of FedEx on a non-official domain (bkeva.cfd subdomain)

Domain registered 1 day ago (2026-11-04) and unranked in Cisco Umbrella

Google Safe Browsing Social Engineering verdict

IDS phishing alert targeting FedEx landing page

Obfuscated JavaScript concealing IP-lookup endpoints used for victim profiling

Fabricated parcel-tracking narrative pressuring users to submit personal address data

Domain age information unavailable

Details

Page Title

FedEx | Tracking

Scan Type

public

Favicon Hash

MMH3: 2070771852

MD5: f9f3a4bf508eec8270bf7c8fe4397384

Domain Name Analysis

The domain 'fedex.bkeva.cfd' uses the .cfd top-level domain and includes subdomain 'fedex'. The second-level label 'bkeva' is 5 characters long with 2 vowels and 3 consonants. Splitting it apart reveals 3 words: b, kev, a. Average segment length settles at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.80s

Total Load Time

477 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:3,023 chars

Detector Agreement:100%

Website Classification

Primary Category

phishing/scam40% confidence

Type: dynamic

Method: structural

All Detected Categories

phishing/scam

40%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	47.89.137.76	United States	AS45102Alibaba (US) Technology Co., Ltd.
3	104.26.13.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.26.9.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	146.75.121.91Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
14	4	-	-