Security Scan: Zeitlich begrenzte Aktion: 70 % Rabatt auf On

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8362b015-26fb-4dc9-ae72-c29fd88ddbb1 Domain and IP registration (RDAP)/api/v1/rdap/8362b015-26fb-4dc9-ae72-c29fd88ddbb1How often this domain was scanned/api/v1/domain/stats/xn--b1a.women-flowers.lol Scan history for this domain/api/v1/domain/history/xn--b1a.women-flowers.lol?limit=15

This website contacted 25 IPs in 3 countries across 18 domains to perform 88 HTTP transactions. The main domain is women-flowers.lol and was registered 1 month ago.

Submitted URL: https://xn--b1a.women-flowers.lol/XhGCOD/

Effective URL:

https://try-ondrela.com/ondrela/product?vndr=evf&evf=1&offid=98&affili...

Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

Risk Score

No forms, malware or impersonation: self-branded tracking-card shop. Risk comes from pushy discount/trust claims and an affiliate redirect chain through an unrelated .lol domain. Treat marketing claims skeptically.

Risk Factors (4)

Deceptive marketing patterns: fake limited-time discount and unverifiable customer-count/review claims

Unsubstantiated compatibility claims with Apple Find My / Google Find Hub

Traffic funneled through an unrelated punycode .lol domain with affiliate parameters (affiliate_id, subid5, source_id) to a differently named destination domain

Entry domain age (140 days) says nothing about the final destination, try-ondrela.com, whose age is unknown

Safety Factors (4)

No credential, login or payment form on the page (verified form facts: 0 forms)

No Indicators of Compromise, YARA hits, IDS alerts or Safe Browsing flags

Brand shown (Ondrela) matches its own domain try-ondrela.com — self-branding, not impersonation of another company

No obfuscated JavaScript, no DevTools blocking, no cross-origin credential exfiltration detected

Domain age information unavailable

Details

Page Title

Zeitlich begrenzte Aktion: 70 % Rabatt auf Ondrela! | Ondrela

Scan Type

public

Favicon Hash

MMH3: 920837644

MD5: 8fe7ac8085a2a5aa4be0ab0f89c5ad94

Domain Name Analysis

The domain 'xn--b1a.women-flowers.lol' uses the .lol top-level domain with subdomain 'xn--b1a'. Its registrable label 'women-flowers' stretches across 13 characters with four vowels and eight consonants, plus one hyphen. Word splitting yields two words: women, flowers. Expect 6 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.12s

Total Load Time

3.4 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:8,088 chars

Detector Agreement:75%

Website Classification

Primary Category

finance banking90% confidence

Type: spa

Method: ml+structural

All Detected Categories

finance banking

90%

technology software

78%

phishing scam

78%

e-commerce shopping

74%

government public service

67%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	104.18.29.91Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	209.38.105.202	Amsterdam, North Holland, Netherlands	AS14061DigitalOcean, LLC
3	104.21.95.212Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.21.33.82Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.110.94Google · CDN	United States	AS15169Google LLC
3	34.36.244.111Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
3	142.251.20.97Google · CDN	United States	AS15169Google LLC
3	104.26.7.169Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	151.101.2.217Fastly · CDN	United States	AS54113Fastly, Inc.
3	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
88	25	-	-