ScanMalware.com

Security Scan Report: onemotoring.vrlerys.top

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/02d4287a-69f3-4315-bfbd-f4f66f4ba2d6Domain and IP registration (RDAP)/api/v1/rdap/02d4287a-69f3-4315-bfbd-f4f66f4ba2d6How often this domain was scanned/api/v1/domain/stats/onemotoring.vrlerys.topScan history for this domain/api/v1/domain/history/onemotoring.vrlerys.top?limit=15
This website contacted 2 IPs in 1 country across 1 domain to perform 8 HTTP transactions. The main domain is vrlerys.top and was registered 3 months ago.

Submitted URL: https://onemotoring.vrlerys.top

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

New unranked .top domain impersonating OneMotoring, hit by a single-source phishing-framework indicator and HIGH IDS hostile-domain alerts; site currently down (Cloudflare 521).

Risk Factors (4)
Threat-intelligence match for a phishing framework on the primary domain
Brand-named subdomain (onemotoring) hosted on an unrelated, new .top domain
HIGH-severity IDS alerts flagging the .top domain as hostile
New, unranked domain (81 days, absent from Cisco Umbrella top 1M)
Domain age information unavailable

Details

Page Title

vrlerys.top | 521: Web server is down

Scan Type

public

Domain Name Analysis

Within the .top top-level domain, 'onemotoring.vrlerys.top' is registered; it also runs on subdomain 'onemotoring'. The core label 'vrlerys' covers 7 characters containing 1 vowel alongside 6 consonants. Tokenizing the label suggests 3 words: vr, ler, ys. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://onemotoring.vrlerys.top

Page Load Overview

30.41s
Total Load Time
16 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:694 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical78% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
78%
technology software
69%
government public service
50%
cryptocurrency blockchain
49%
news media journalism
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.21.4.164Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.67.132.67Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
82--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T186E17671F1B552B711A381E23695EB697AE0C213CBEF4594B3DDC2632F9EE81D903250

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:ljHjCIjuNWDa/D2KUus3G4Fh8/G4FSM424FfG+skKmk2OLwmNnwL5SFRc3BaQxJ:ljHjDjuNGa/Cq8e4kVO/Q85SF+3seJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6979:oUgBExQSCAmAYkEwCEIIoAJzEAJA5ggQQTyEQYwATAMFqKQIDIrxo1EBCCCCKAAUbhoJIUBEDgDBAiAkJBWCQMACaBCEEEgF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c70000d7f7ffff
Perceptual Hash:b4389abc9a676531
Difference Hash:1c3e8e8a3406061c
Wavelet Hash:c7000000d7f3f7ff
Color Hash:#931f3a

Other Hashes

Crop Resistant:1c3e8e8a3406061c

Scan History

Scan history not available

Unable to load historical scan data