ScanMalware.com

Security Scan Report: inpost-pl.vnieloralok.cfd

Site favicon
Submitted: Oct 26, 2025, 12:47:14 AMCompleted: Oct 26, 2025, 12:47:55 AMpubliccompleted
Loading additional data...

Summary

This website contacted 8 IPs in 1 country across 2 domains to perform 10 HTTP transactions. The main domain is inpost-pl.vnieloralok.cfd and was registered NaN years ago.

Submitted URL: https://inpost-pl.vnieloralok.cfd/payment/cae44c860d3c/millennium

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

New, unranked domain flagged for phishing; treat as high‑risk and do not engage.

Risk Factors
Newly registered domain (<7 days old)
Unranked domain with no established reputation
Site flagged by Cloudflare as a suspected phishing destination
Domain age information unavailable

Details

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

Suspected phishing site | Cloudflare

Scan Type

public

Language

🇺🇸

English

(50% confidence)

Category

phishing scam

(89%)

Domain Information

You're looking at domain 'inpost-pl.vnieloralok.cfd' on the .cfd top-level domain and includes subdomain 'inpost-pl'. Its registrable label 'vnieloralok' stretches across 11 characters containing 5 vowels alongside 6 consonants. Tokenizing the label suggests 4 words: v, niel, oral, ok. Median word length is 3 characters. Most frequently, 'v' shows up in Slovenian. You will also see it in Czech and Slovak contexts.

Screenshot

Security scan screenshot of https://inpost-pl.vnieloralok.cfd/payment/cae44c860d3c/millennium

Page Load Overview

22.81s
Total Load Time
10
HTTP Requests
2
Domains
0 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:50%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:395 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam89% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

phishing scam
89%
technology software
29%
phishing/scam
20%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1172.67.192.99United States
AS13335CLOUDFLARENET
1104.18.94.41United States
AS13335CLOUDFLARENET
1104.18.95.41United States
AS13335CLOUDFLARENET
12606:4700:3035::6815:bbdUnited States
AS13335CLOUDFLARENET
12606:4700::6812:5f29United States
AS13335CLOUDFLARENET
1104.21.11.189United States
AS13335CLOUDFLARENET
12606:4700::6812:5e29United States
AS13335CLOUDFLARENET
12606:4700:3037::ac43:c063United States
AS13335CLOUDFLARENET
108--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BEA16472F9BD043F119391B2A6BDB7093965C047C7A6099036BCC2751F4BF52AD532C5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:liADa/D+DMFozLeiO/t8Ajhg1QMgZiey2uOPnRC3vaQxvb0:liEa/SoYnOVphCgZluunM3Cej0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4833:MAFBQMAZAoABgoEIMQAAgIMAAAlGAAAFBEIZAAA6AEigSFigBABWQAAIARWQBkCAaEgBggQgBGAAAoCAMAQAAQIDECYAAAYA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff8787ffe7e7ffff
Perceptual Hash:b83898c7c7c7263c
Difference Hash:203c3c1004040000
Wavelet Hash:9c848080c3c3ffff
Color Hash:#72e06c

Other Hashes

Crop Resistant:203c3c1004040000

Scan History

Scan history not available

Unable to load historical scan data