Security Report: fedex.awltx.cfd - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/66325700-a63f-4973-bc90-52a98a58d8e8 Domain and IP registration (RDAP)/api/v1/rdap/66325700-a63f-4973-bc90-52a98a58d8e8How often this domain was scanned/api/v1/domain/stats/fedex.awltx.cfd Scan history for this domain/api/v1/domain/history/fedex.awltx.cfd?limit=15

This website contacted 6 IPs in 2 countries across 4 domains to perform 15 HTTP transactions. The main domain is awltx.cfd and was registered 5 days ago.

Submitted URL: https://fedex.awltx.cfd/com.us

Effective URL:

https://fedex.awltx.cfd/com.us/#/index

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake FedEx tracking page on a day-old lookalike domain using a bogus delivery exception to harvest address details; Google Safe Browsing and IDS both flag it as phishing/social engineering.

Risk Factors (6)

Google Safe Browsing threat: Social Engineering

Brand impersonation of FedEx on a non-FedEx domain (fedex.awltx.cfd, registrable domain awltx.cfd)

IDS phishing signature for a FedEx landing page served without SSL

Fabricated shipment/delivery-exception narrative with a fabricated tracking number and future-dated events to manufacture urgency

Personal-information collection flow ('Update delivery address', 'Schedule redelivery', apartment/suite field) behind a new, unranked domain

Obfuscated script hides third-party IP-lookup hosts (api.ipify.org, api64.ipify.org, ipapi.co) used to geolocate visitors — typical of phishing kits

Domain age information unavailable

Details

Page Title

FedEx | Tracking

Scan Type

public

Favicon Hash

MMH3: 2070771852

MD5: f9f3a4bf508eec8270bf7c8fe4397384

Domain Name Analysis

You're looking at domain 'fedex.awltx.cfd' on the .cfd top-level domain; it also runs on subdomain 'fedex'. Count 5 characters in 'awltx' with 1 vowel and four consonants. Breaking it apart gives 2 words: awl, tx. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.58s

Total Load Time

477 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:3,023 chars

Detector Agreement:100%

Website Classification

Primary Category

phishing/scam40% confidence

Type: dynamic

Method: structural

All Detected Categories

phishing/scam

40%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	47.89.137.76	United States	AS45102Alibaba (US) Technology Co., Ltd.
2	104.26.12.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.26.9.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	146.75.121.91Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
2	172.67.74.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.26.8.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	6	-	-