Security Scan: Black Friday sale

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4bff76e4-e0e8-4054-8d7e-a5b77c01d5a1 Domain and IP registration (RDAP)/api/v1/rdap/4bff76e4-e0e8-4054-8d7e-a5b77c01d5a1How often this domain was scanned/api/v1/domain/stats/homlawarm-pl.shop Scan history for this domain/api/v1/domain/history/homlawarm-pl.shop?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 11 HTTP transactions. The main domain is homlawarm-pl.shop and was registered 5 days ago.

Submitted URL: https://www.homlawarm-pl.shop/

AI Security Verdict

Low Risk

Confidence: 60%

Risk Score

3-day-old, unranked .shop storefront selling dolls; no credential/payment forms and no threat-intel hits, but the new domain and circular redirect warrant caution before purchasing.

Risk Factors (4)

Very newly registered domain (3 days old)

No domain reputation (not in Cisco Umbrella top 1M)

Circular redirect in the redirect chain

Generic seasonal title ('Black Friday sale') unrelated to the domain name on an ephemeral .shop storefront

Safety Factors (6)

No credential or payment forms on the page (0 password, 0 payment fields)

No Indicators of Compromise, hunting rule malware patterns, IDS alerts, or kit-roster matches

Cross-origin resources limited to Cloudflare challenge and Google Fonts

No impersonation of any identifiable third-party brand

Block-page vs. real-content mismatch is consistent with ordinary bot protection, not evasion

Verdict names no specific threat, and DOM analysis found no password field (real or disguised) or payment field and no other hard signal — elevated score unsupported; risk adjusted from 4 to 3

Domain age information unavailable

Details

Page Title

Black Friday saleother network

Scan Type

public

Favicon Hash

MMH3: 399710409

MD5: f83c431bd0691509fd6a0bafaf6dccc3

Domain Name Analysis

You're looking at domain 'www.homlawarm-pl.shop' on the commerce-oriented generic top-level domain (.shop) with subdomain 'www'. The core label 'homlawarm-pl' covers 12 characters containing 3 vowels alongside 8 consonants, plus one hyphen. Segmentation suggests four words: hom, la, warm, pl. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

11.06s

Total Load Time

1.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:31,265 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical56% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical

56%

finance banking

54%

real estate property

43%

government public service

43%

healthcare medical

39%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	104.18.20.248Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.14.94Google · CDN	United States	AS15169Google LLC
2	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.95.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	4	-	-