Security Scan Report: www.olx.offer986902.shop

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 34 HTTP transactions. The main domain is offer986902.shop.

Submitted URL: https://www.olx.offer986902.shop/

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

Unranked host using the OLX brand in a subdomain of an unrelated domain, showing only a cloaked maintenance/error placeholder. No forms or malware evidence captured, but the deceptive hostname warrants avoidance.

Risk Factors (2)
Deceptive hostname that borrows the OLX brand name on an unrelated .shop domain
Maintenance/error page that only reflects requester IP and User-Agent, consistent with scanner cloaking
Safety Factors (4)
No credential, password or payment fields and no forms at all on the captured page
No Indicators of Compromise, no hunting rule/JavaScript malware patterns, no known malicious kit
No credential exfiltration and no third-party script hosts
No manipulative text addressed to automated reviewers
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain 'www.olx.offer986902.shop' uses the commerce-oriented generic top-level domain (.shop) and includes subdomain 'www.olx'. The core label 'offer986902' covers 11 characters containing 2 vowels alongside 3 consonants, along with six digits. It segments into 2 words: offer, 986902. Median word length is 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.olx.offer986902.shop/

Page Load Overview

0.82s
Total Load Time
692 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:62%
Script:Latin
Direction:ltr

Detection Details

Text Length:194 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software46% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
46%
cryptocurrency blockchain
46%
documentation technical
31%
adult content
29%
healthcare medical
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1094.26.83.75Frankfurt am Main, Hesse, Germany
AS207043Dedik Services Limited
640.160.141.224United States
AS16276OVH SAS
6172.67.70.233Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
640.160.90.201United States
AS16276OVH SAS
6104.26.0.100Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
345--

Detected Technologies1

Nginxv1.31.7
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16632CE5FBC09DF45AC65AD5D003E9E3B44CCC97BC2B5D96893ECCE0916426BA2BC6D80

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:xsPrn1JKF/lx3s5iZvYyrBH/TxvEfJ10Qgnqzc0mRKOw4WF:xyryF+30Mww4WF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11507:VAWJcaiD6JPBkGBFQErRUChhpIGgo2A4JBqQgUIHQiQCVjE1JkxCNicF8MAhsCjBCIIlECFj1IBEwGNFB+Aig0DAygCYY6FA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3ffffe7e7ffffff
Perceptual Hash:a665cd652664cd65
Difference Hash:0400000c0c000000
Wavelet Hash:002c1c00273f3f27
Color Hash:#40acbf

Other Hashes

Crop Resistant:0400000c0c000000

Scan History

Scan history not available

Unable to load historical scan data