Security Scan Report: 2lj8ucr5.cn

Site favicon
Submitted: Nov 6, 2025, 4:06:27 AMCompleted: Nov 6, 2025, 4:07:30 AMpubliccompleted
Loading additional data...

Summary

This website contacted 8 IPs in 1 country across 2 domains to perform 13 HTTP transactions. The main domain is 2lj8ucr5.cn and was registered NaN years ago.

Submitted URL: https://tlymbogbqv.com%E2%88%95rjczl%E2%88%95pwcjawy%E2%88%[email protected]/

AI Security Verdict

Low Risk

Confidence: 85%

3
Risk Score

Low risk; the page is a legitimate Cloudflare warning, but the URL shows phishing‑style manipulation.

Risk Factors
Recently registered domain (< 1 year old)
Unranked in Cisco Umbrella (low reputation)
URL uses "@" to obscure the actual domain, a known phishing technique
Safety Factors
No credential or payment forms on the page
Cloudflare warning page is a legitimate security interstitial
No malicious Indicators of Compromise detected
Domain age information unavailable

Details

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

Suspected phishing site | Cloudflare

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

suspicious phishing

(99%)

Domain Information

The domain name 'tlymbogbqv.com%E2%88%95rjczl%E2%88%95pwcjawy%E2%88%[email protected]' uses the Chinese country-code top-level domain (.cn) with no subdomain. Count 8 characters in '2lj8ucr5' split between one vowel and 4 consonants, plus 3 digits. Splitting it apart reveals 6 words: 2, lj, 8, u, cr, 5. The median word length lands at one character. Most frequently, 'lj' shows up in Bosnian. Usage also turns up in Croatian and Serbian contexts.

Screenshot

Security scan screenshot of https://tlymbogbqv.com%E2%88%95rjczl%E2%88%95pwcjawy%E2%88%95jniia@2lj8ucr5.cn/

Page Load Overview

40.25s
Total Load Time
13
HTTP Requests
2
Domains
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:395 chars
Detector Agreement:100%

Website Classification

Primary Category

suspicious phishing99% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

suspicious phishing
99%
malicious
36%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1104.18.94.41United States
AS13335CLOUDFLARENET
1104.18.95.41United States
AS13335CLOUDFLARENET
1188.114.97.3United States
AS13335CLOUDFLARENET
1188.114.96.3United States
AS13335CLOUDFLARENET
12606:4700::6812:5f29United States
AS13335CLOUDFLARENET
12606:4700::6812:5e29United States
AS13335CLOUDFLARENET
12a06:98c1:3120::3United States
AS13335CLOUDFLARENET
12a06:98c1:3121::3United States
AS13335CLOUDFLARENET
138--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15CA16362FABD047F219391B2A6BDB70A3965C047C7A609903ABCC2751F4BF91AD132C5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:liADa/D+DMFozLeiO/t8AtalgZiecuWnR73vaQxvb0:liEa/SoYnOVUgZEuWnV3Cej0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4773:ImECQAEYCAQBAkEAMAggkIMQMAhOSAABAsI5AVICAEigGBggBABD4MKIARMBBEAAaEiAgqEIBETABIAAIBAIAgACACAQBCAB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff8787ffe7e7ffff
Perceptual Hash:b83898c7c7c7263c
Difference Hash:203c3c1004040000
Wavelet Hash:9c848080c3c3ffff
Color Hash:#1f933a

Other Hashes

Crop Resistant:203c3c1004040000

Scan History

Scan history not available

Unable to load historical scan data