ScanMalware.com

Security Scan Report: www.olx.offer0958892.shop

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8a4d1e77-37f0-492b-9d12-7f455aba2832Domain and IP registration (RDAP)/api/v1/rdap/8a4d1e77-37f0-492b-9d12-7f455aba2832How often this domain was scanned/api/v1/domain/stats/olx.offer0958892.shopScan history for this domain/api/v1/domain/history/olx.offer0958892.shop?limit=15
This website contacted 3 IPs in 2 countries across 3 domains to perform 32 HTTP transactions. The main domain is offer0958892.shop.

Submitted URL: https://www.olx.offer0958892.shop/

AI Security Verdict

High Risk

Confidence: 72%

8
Risk Score

Deceptive hostname uses the OLX brand as a subdomain on an unrelated unranked .shop domain and serves only a maintenance/cloaking stub. No forms captured, but treat as brand impersonation infrastructure.

Risk Factors (3)
Brand name of a different, well-known company (OLX) used as a subdomain label on an unrelated domain — deceptive hostname
Unranked domain with no published creation date presenting a major brand name, with no legitimate relationship to that brand
Interstitial "maintenance / try again in 2-3 hours" page with a raw client IP and User-Agent echoed back, consistent with cloaking infrastructure that will show different content to targeted visitors
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.olx.offer0958892.shop' on the commerce-oriented generic top-level domain (.shop) with subdomain 'www.olx'. The registrable portion 'offer0958892' spans 12 characters split between two vowels and three consonants, along with 7 digits. Segmentation suggests two words: offer, 0958892. Median word length is 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.olx.offer0958892.shop/

Page Load Overview

1.91s
Total Load Time
692 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:62%
Script:Latin
Direction:ltr

Detection Details

Text Length:194 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software46% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
46%
cryptocurrency blockchain
46%
documentation technical
31%
adult content
29%
healthcare medical
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1294.26.83.75Frankfurt am Main, Hesse, Germany
AS207043Dedik Services Limited
1040.160.90.201United States
AS16276OVH SAS
10172.67.70.233Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
323--

Detected Technologies1

Nginxv1.31.7
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16632CE5FBC09DF45AC65AD5D003E9E3B44CCC97BC2B5D96893ECCE0916426BA2BC6D80

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:xsPrn1JKF/lx3s5iZvYyrBH/TxvEfJ10Qgnqzc0mRKOw4WF:xyryF+30Mww4WF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11507:VAWJcaiD6JPBkGBFQErRUChhpIGgo2A4JBqQgUIHQiQCVjE1JkxCNicF8MAhsCjBCIIlECFj1IBEwGNFB+Aig0DAygCYY6FA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3ffffe7e7ffffff
Perceptual Hash:a665cd652664cd65
Difference Hash:0400000c0c000000
Wavelet Hash:002c1c00273f3f27
Color Hash:#535dac

Other Hashes

Crop Resistant:0400000c0c000000

Scan History

Scan history not available

Unable to load historical scan data