Security Scan Report: trelumo.cfd

Submitted: Dec 4, 2025, 10:13:33 AMCompleted: Dec 4, 2025, 10:14:07 AMpubliccompleted
Loading additional data...

Summary

This website contacted 8 IPs in 1 country across 2 domains to perform 12 HTTP transactions. The main domain is trelumo.cfd and was registered NaN years ago.

Submitted URL: https://trelumo.cfd/indexco.jp

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Site is a confirmed phishing scam; do not visit or provide any information.

Risk Factors
Cloudflare phishing warning
Critical domain age (<7 days)
UNRANKED domain in Cisco Umbrella
Suspicious .cfd TLD on a newly registered site
Domain age information unavailable

Details

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

Suspected phishing site | Cloudflare

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

phishing scam

(86%)

Domain Information

You're looking at domain 'trelumo.cfd' on the .cfd top-level domain. Count 7 characters in 'trelumo' holding three vowels versus four consonants. Breaking it apart gives two words: tre, lumo. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://trelumo.cfd/indexco.jp

Page Load Overview

0.25s
Total Load Time
12
HTTP Requests
2
Domains
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:395 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam86% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

phishing scam
86%
technology software
28%
phishing/scam
20%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7104.18.94.41United States
AS13335CLOUDFLARENET
4104.21.34.187United States
AS13335CLOUDFLARENET
1104.18.95.41United States
AS13335CLOUDFLARENET
12606:4700:3030::6815:22bbUnited States
AS13335CLOUDFLARENET
12606:4700:3035::ac43:a3bcUnited States
AS13335CLOUDFLARENET
12606:4700::6812:5f29United States
AS13335CLOUDFLARENET
12606:4700::6812:5e29United States
AS13335CLOUDFLARENET
1172.67.163.188United States
AS13335CLOUDFLARENET
128--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T164A18372F9BD157F109392B262BDA70939A5C147C79A09803ABCC2751F8BF92AD132C1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:PjnjtjuiADa/D+DMFozLeiO/t8AkHgZieKuiqnRW3vaQxvb0:PjnjtjuiEa/SoYnOVegZCuiqnA3Cej0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5044:TAIAGIkgIQCAgMBgohABBAhUBDEgFghABCAgAANFUAKBEDcIAqMQAoAHBEgOBAAUGKECEBIEEZmEEDAQScYABAGAQMAhAggQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff7e1e003e0fffff
Perceptual Hash:9755e08307f8f80f
Difference Hash:00c0705a72501000
Wavelet Hash:fe3e0e001e0e0efe
Color Hash:#3a7778

Other Hashes

Crop Resistant:00c0705a72501000

Scan History

Scan history not available

Unable to load historical scan data