Security Scan Report: listing-o0nrd5w.orbitrelaydata.cfd

Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 5 domains to perform 14 HTTP transactions. The main domain is orbitrelaydata.cfd and was registered 1 month ago.

Submitted URL: https://listing-o0nrd5w.orbitrelaydata.cfd/?ca=poNSfquKq512ApeYjVghwViSun4x1MhCqHVH2Paq4jN

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Fresh 5-day-old .cfd domain running a wallet-connect 'token vote' with fake activity and point bait; phishing threat-intel hit and abuse-TLD IDS alerts. No credential forms, but avoid connecting a wallet.

Risk Factors (5)
Newly registered domain (5 days) on a high-abuse .cfd TLD
Wallet-connect gated 'voting' with fabricated real-time activity feed and point incentives
Phishing threat-intel match on the hosting domain
Suspicious third-party domains (tokenadmin.lol, data-repo.cc) in page resources
Unranked / no domain reputation
Domain age information unavailable

Details

Page Title

PONS – Pons · OrbitRelay

Scan Type

public

Domain Name Analysis

Domain 'listing-o0nrd5w.orbitrelaydata.cfd' uses the .cfd top-level domain, featuring subdomain 'listing-o0nrd5w'. The core label 'orbitrelaydata' covers 14 characters with 6 vowels and eight consonants. Segmentation suggests 3 words: orbit, relay, data. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://listing-o0nrd5w.orbitrelaydata.cfd/?ca=poNSfquKq512ApeYjVghwViSun4x1MhCqHVH2Paq4jN

Page Load Overview

1.67s
Total Load Time
445 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,731 chars
Detector Agreement:75%

Website Classification

Primary Category

cryptocurrency blockchain54% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
54%
forum community discussion
29%
gambling betting
29%
government public service
28%
finance banking
27%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6104.21.29.138Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.250.154.95Google · CDNUnited States
AS15169Google LLC
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.33.58Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
145--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EE33E75B66B32131652350AA6FEB560A3370D103D20BC864BFDD53888FC6AD9D9B378C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:Thyrt4gE+I+WgIKebLwWfbG5uVi0kKVA3VMk5373:kt4gE+Ab8B33VMkN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:51642:QkA3QkRWuhlGZATwADkNNSJNkAmAgQo6CQLSgEIiISUthNQAAMaxt4HYkgAgFogKBoEIBDRgMImAZoGIJMgxxMhIKARyGHpE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff
Perceptual Hash:870707070f0f1f3f
Difference Hash:8000000000000000
Wavelet Hash:70f0f0f0f0f0f0f0
Color Hash:#864d2d

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data