ScanMalware.com

Security Scan Report: nqhzofzx7b.hdply.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0ca5be40-0309-404b-846f-ac6b75c810a9Domain and IP registration (RDAP)/api/v1/rdap/0ca5be40-0309-404b-846f-ac6b75c810a9How often this domain was scanned/api/v1/domain/stats/nqhzofzx7b.hdply.comScan history for this domain/api/v1/domain/history/nqhzofzx7b.hdply.com?limit=15
This website contacted 6 IPs in 4 countries across 4 domains to perform 6 HTTP transactions. The main domain is hdply.com and was registered 4 months ago.

Submitted URL: https://nqhzofzx7b.hdply.com/

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Fake 'Adobe.com' login page on an unranked hdply.com subdomain using a 'Document Locked' lure to harvest email, password and phone — classic credential phishing; do not enter credentials.

Risk Factors (5)
Impersonation of Adobe branding on a non-Adobe domain
Login form collecting email and password behind a fake document-lock pretext
Unranked, recently registered infrastructure (124 days) on shared hosting
Deceptive urgency/access-restriction lure ('Document Locked')
Gibberish subdomain uncharacteristic of a legitimate brand
Domain age information unavailable

Details

Page Title

Adobe.com

Scan Type

public

Domain Name Analysis

The domain name 'nqhzofzx7b.hdply.com' uses the commercial generic top-level domain (.com) and includes subdomain 'nqhzofzx7b'. The core label 'hdply' covers 5 characters split between zero vowels and 5 consonants. Breaking it apart gives 2 words: hd, ply. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Mao |omme| 8 ae ae ee neopets DOCUMENT LOCKED ‘Sign in With Your Email To View the RFQ List Clearly Email Phone Number

Page Load Overview

1.59s
Total Load Time
78 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:99 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software63% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
63%
documentation technical
31%
adult content
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
113.125.51.81Aws · CLOUDSouth Korea
AS16509Amazon.com, Inc.
1195.80.159.133France
AS29152Decknet SARL
145.43.142.5United Kingdom
AS16276OVH SAS
1104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
145.43.142.2United Kingdom
AS16276OVH SAS
1104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
66--

Detected Technologies4

Ubuntu
40%
Nginxv1.24.0
40%
jsDelivr
20%
EmailJS
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A91282265AE308562753C9B877E712053661D003C942DE683FEC125C8F8FE86E9A37E9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nMV1OLNrT0aDLlEE899xJJvONZSeOcxTcSDuEf7YK1E3/iBTDvMeol5hF:Myx/0CZEE899xJErgKNzjJzMechF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9234:FjOQCtBRCAKqEgOI4kYKywAgAYCIQUDAAAwEhBJEopYqwDQoQgiiQXVECQAy0haSkErV3ECIBSR0BBWggxBC1CkGkMTJHpZp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1c9c1c1c1c1c1c1c
Perceptual Hash:98ff67f36d006580
Difference Hash:393931b1b1b1b9b9
Wavelet Hash:ff9c1c1c1c1c1c1d
Color Hash:N/A

Other Hashes

Crop Resistant:a6bea222a2e252a2,6464120000000000,393931b1b1b1b9b9

Scan History

Scan history not available

Unable to load historical scan data