ScanMalware.com

Security Scan Report: carnegiefreshen.bond

Redirected to:
https://carnegiefreshen.bond/nl/odr/hotels-bonito-brazili%C3%AB?search...
Site favicon
Submitted: Sep 14, 2026, 5:59:21 AMCompleted: Sep 14, 2026, 6:00:08 AMpubliccompleted

Summary

This website contacted 25 IPs in 5 countries across 26 domains to perform 2 HTTP transactions. The main domain is carnegiefreshen.bond.

Submitted URL: http://carnegiefreshen.bond/nl/odr/hotels-bonito-brazili%C3%AB?search=200-57866

Effective URL: https://carnegiefreshen.bond/nl/odr/hotels-bonito-brazili%C3%AB?search=200-57866Redirected

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

4-day-old domain carnegiefreshen.bond impersonates trivago with cloned branding, meta tags and copyright, though it hosts only a search form and no credential/payment capture. Brand impersonation on a new domain warrants HIGH_RISK.

Risk Factors
Full-page impersonation of the trivago brand and its official corporate identity on an unrelated 4-day-old domain
Brand name and official corporate address/copyright displayed on a domain that is not owned by trivago
Newly registered domain (4 days) with no domain reputation, used to front a major travel brand
Content cloned/auto-generated from trivago with ad-network monetization, consistent with SEO doorway or affiliate cloaking
Domain age information unavailable

Details

Page Title

trivago.com.br - Vergelijk hotelprijzen wereldwijd

Scan Type

public

Language

🇳🇱

Dutch

(80% confidence)

Category

travel tourism

(62%)

Domain Information

Within the .bond top-level domain, 'carnegiefreshen.bond' is registered without a subdomain. The core label 'carnegiefreshen' covers 15 characters containing six vowels alongside 9 consonants. It segments into 2 words: carnegie, freshen. Average segment length settles at 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://carnegiefreshen.bond/nl/odr/hotels-bonito-brazili%C3%AB?search=200-57866

Page Load Overview

5.91s
Total Load Time
197
HTTP Requests
26
Domains
986 KB
Total Size

Language Analysis

Primary Language

🇳🇱Dutch
Code: nl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:nl
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:nl
Text Length:10,497 chars
Detector Agreement:80%

Website Classification

Primary Category

travel tourism62% confidence
Type: spa
Method: ml+structural

All Detected Categories

travel tourism
62%
adult content
49%
corporate
25%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
29104.21.6.15Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7150.171.27.10Azure · CLOUDUnited States
AS8075Microsoft Corporation
779.127.211.90Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
734.249.174.236Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
735.201.111.240Google · CDNKansas City, Missouri, United States
AS396982Google LLC
7141.226.224.32Newark, New Jersey, United States
AS200478Taboola.com ltd
7142.251.13.97Google · CDNUnited States
AS15169Google LLC
723.36.162.202Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
723.36.162.215Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
7172.67.134.40Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
19725--

Page Statistics

197
Requests
26
Unique Domains
2.4 MB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F8744D335A81086AD937ED5F9DE67B28E22FF0885BF50D9C659C0ACE5F05E2DB82110D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Lhsc2tsGv/ELO833Z1qLpt8Qs9wefYBOFGwOjAcHj2J8VAA1l9pmnL/Q:dsDsXLOWQs+bBOhOBD02VfmnU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:338741:QMojCIhgICewgpQUEIRQECFCIgBKCX+IBJAqsEX0SiobDAgEIAmRZEMPRCcTSUJECAmU4MFKhABFyggogFBMYIQpASmIteBG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc7c7c3f3ffffff
Perceptual Hash:b1319acccc333367
Difference Hash:001c1c1606000000
Wavelet Hash:fcdcc0c0030f0f0f
Color Hash:#392d86

Other Hashes

Crop Resistant:001c1c1606000000

Scan History

Scan history not available

Unable to load historical scan data