Security Report: fedex.cqgty.cfd - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8a061723-aedb-4c69-af54-514e5b79c6e6 Domain and IP registration (RDAP)/api/v1/rdap/8a061723-aedb-4c69-af54-514e5b79c6e6How often this domain was scanned/api/v1/domain/stats/fedex.cqgty.cfd Scan history for this domain/api/v1/domain/history/fedex.cqgty.cfd?limit=15

This website contacted 4 IPs in 2 countries across 4 domains to perform 14 HTTP transactions. The main domain is cqgty.cfd and was registered 6 days ago.

Submitted URL: https://fedex.cqgty.cfd/com.us/

Effective URL:

https://fedex.cqgty.cfd/com.us/#/index

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Confirmed FedEx phishing page on a 2-day-old look-alike domain, flagged by Safe Browsing for social engineering and by IDS as a FedEx phishing landing; it uses a fake delivery-exception lure to harvest recipient and address details.

Risk Factors (6)

Brand impersonation of FedEx on a look-alike subdomain (fedex.cqgty.cfd)

Domain only 2 days old (CRITICAL age category)

Google Safe Browsing Social Engineering threat

Network IDS phishing signature for a FedEx landing page on non-SSL

Obfuscated script hiding IP-geolocation/threat-feed hosts (api.ipify.org, api64.ipify.org, ipapi.co) used to profile visitors

Urgency and account-return threats pressuring victims to submit personal/address details

Domain age information unavailable

Details

Page Title

FedEx | Tracking

Scan Type

public

Favicon Hash

MMH3: 2070771852

MD5: f9f3a4bf508eec8270bf7c8fe4397384

Domain Name Analysis

Within the .cfd top-level domain, 'fedex.cqgty.cfd' is registered, featuring subdomain 'fedex'. The registrable portion 'cqgty' spans 5 characters split between zero vowels and five consonants. Breaking it apart gives three words: c, qg, ty. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.85s

Total Load Time

477 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:3,022 chars

Detector Agreement:100%

Website Classification

Primary Category

phishing/scam40% confidence

Type: dynamic

Method: structural

All Detected Categories

phishing/scam

40%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	47.89.137.76	United States	AS45102Alibaba (US) Technology Co., Ltd.
3	104.26.13.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	172.67.69.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	146.75.121.91Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
14	4	-	-