Security Scan Report: mcfrys.co.ke

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 6 HTTP transactions. The main domain is mcfrys.co.ke and was registered 17 years ago.

Submitted URL: https://mcfrys.co.ke/wp-includes/rest-api/rjpvfal/hmzrces/ljfapin/FedEx/

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Compromised WordPress site hosting a fake FedEx login page to steal credentials. Safe Browsing flags social engineering; avoid entering any information.

Risk Factors (5)
Credential-harvesting login form on a domain unrelated to the impersonated brand
Brand impersonation of FedEx
Compromised WordPress installation abused for phishing
Google Safe Browsing social engineering detection
Unranked domain despite claiming to be FedEx
Domain age information unavailable

Details

Page Title

Fedex

Scan Type

public

Domain Name Analysis

Within the Kenyan country-code top-level domain (.co.ke), 'mcfrys.co.ke' is registered with no subdomain. The second-level label 'mcfrys' is 6 characters long split between zero vowels and 6 consonants. Word splitting yields three words: mc, fry, s. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Support Enter your user ID and password to log in CREATE A USER ID User ID Password Remember my user ID FORGOT YOU USER ID OR PASSWORD? Need help? FORGOT YOU USER ID OR PASSWORD?

Page Load Overview

1.77s
Total Load Time
459 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:303 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism39% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism
39%
adult content
33%
government public service
30%
healthcare medical
29%
documentation technical
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
662.12.113.45Nairobi, Nairobi County, Kenya
AS37684Angani Limited
61--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14BB1E46066682D2E5206C4D0E167EB963A47930397061D54FBFD34F3AFCAEA44C235CE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:YipPuAqhJdhJLJ9J+UKYtGZVlLjG9pXu8E5PuEJe:30JvJLJ9J5olXG93E5PuEJe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5561:EicAEEFqQQmEJCIQQhAMAgEgAIAAgwgSKICEEGNIBQACUgqNGgAoAKQAHRAlEBAAEIJWEBAMEiVOECAC1AICCMFQAqQQGgQK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffe7ffff
Perceptual Hash:f74d4c6748494b47
Difference Hash:c50818140c0c0c0c
Wavelet Hash:00c2c6c2e6e6e6fe
Color Hash:07000000038

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data