Security Scan Report: www.ezebra-online.shop

Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 4 countries across 1 domain to perform 2 HTTP transactions. The main domain is ezebra-online.shop and was registered 1 week ago.

Submitted URL: https://www.ezebra-online.shop/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Lookalike of the Polish drugstore eZebra.pl on a 2-day-old, unranked .shop domain that clones the brand's catalogue and hides behind bot protection. No card/password fields captured yet, but it is not the real eZebra — do not shop or submit data.

Risk Factors (5)
Brand impersonation of a different entity's brand (eZebra.pl) on a mismatched domain (ezebra-online.shop)
Domain only 2 days old (CRITICAL age risk category)
Domain not present in Cisco Umbrella rankings
Scanner received a block/error page while real content was served only to residential clients (evasion posture)
Typosquat-style hostname combining the brand name with a hyphen and an unrelated .shop TLD
Domain age information unavailable

Details

Page Title

eZebra.pl: Drogeria internetowa, sklep z kosmetykami onlineother network

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.ezebra-online.shop' on the commerce-oriented generic top-level domain (.shop), featuring subdomain 'www'. Its registrable label 'ezebra-online' stretches across 13 characters holding 6 vowels versus 6 consonants; bonus characters include 1 hyphen. Breaking it apart gives three words: e, zebra, online. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.ezebra-online.shop/

Page Load Overview

0.33s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🇵🇱Polish
Code: pl
Confidence:31%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:102,478 chars
Detector Agreement:80%
Language mismatch: Declared as en but detected as pl

Website Classification

Primary Category

e-commerce shopping44% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
44%
finance banking
26%
forum
20%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2104.16.211.68Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
043.174.196.27Singapore
057.144.222.128Facebook · CDNAmsterdam, North Holland, Netherlands
AS32934Facebook, Inc.
023.36.162.31Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
0142.251.110.94Google · CDNUnited States
AS15169Google LLC
0142.251.14.139Google · CDNUnited States
AS15169Google LLC
02.16.206.135Akamai · CDNHamburg, Free and Hanseatic City of Hamburg, Germany
AS20940Akamai International B.V.
0142.250.154.94Google · CDNUnited States
AS15169Google LLC
0142.250.154.95Google · CDNUnited States
AS15169Google LLC
057.144.222.1Facebook · CDNAmsterdam, North Holland, Netherlands
AS32934Facebook, Inc.
212--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D2F5C69095FC39BC412B6AB651306E781F3410A7F9164E00BBBE03A5CF92BDBA94771D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:Fam+C6b+TVgtE7WE0Jcl+aM+M1ja3SPq+G1:F0mV8ccaPAjgSPq+w

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3489854:BIwAKIEigAeSBCJCMZm7UJVbggTogCkiNwUQ7hgGQCkOoBeJUEaXgAk4liFEKAhwAOBFiQUCwooYEVEHREAPJIxIFiIzdaAL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00000101030f1f
Perceptual Hash:aad394edba85c285
Difference Hash:3321d5cd7b6ff7fd
Wavelet Hash:ff003401113f1f7f
Color Hash:#931f3c

Scan History

Scan history not available

Unable to load historical scan data