ScanMalware.com

Security Scan Report: hodollar.biz

Site favicon
Submitted: May 8, 2026, 9:09:05 AMCompleted: May 8, 2026, 9:10:30 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 1 country across 4 domains to perform 111 HTTP transactions. The main domain is hodollar.biz and was registered NaN years ago.

Submitted URL: https://hodollar.biz

AI Security Verdict

High Risk

Confidence: 82%

7
Risk Score

The site hosts login forms on a recent, unranked domain and triggers critical IDS alerts for potential C2 and data exfiltration, indicating high risk of malware distribution.

Risk Factors
Recent domain (<180 days) with credential forms
Critical IDS alerts indicating malware C2 and data exfiltration
Unranked/low‑reputation domain
Presence of password fields on an untrusted site
Domain age information unavailable

Details

Page Title

Hodollar - Download Premium Online Courses at the Best Prices

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

healthcare medical

(78%)

Domain Information

Domain 'hodollar.biz' uses the business-focused generic top-level domain (.biz) and has no subdomain. The second-level label 'hodollar' is 8 characters long holding three vowels versus 5 consonants. Word splitting yields 2 words: ho, dollar. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hodollar.biz

Page Load Overview

7.29s
Total Load Time
136
HTTP Requests
5
Domains
303 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:9,591 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical78% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
78%
corporate
35%
social media network
28%
e-commerce shopping
27%
e-commerce
20%

Detected Features

Login Form
Search
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
34172.66.161.212United States
AS13335Cloudflare, Inc.
34188.114.97.3United States
AS13335Cloudflare, Inc.
34142.251.110.94United States
AS15169Google LLC
34142.251.13.95United States
AS15169Google LLC
1364--

Detected Technologies15

WordPressv6.9.4
100%
PasswordField
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
Bootstrapv4.3.1
100%
PHP
50%
MySQL
50%
HTTP/3
40%
HSTS
40%
Cloudflare Bot Management
40%
Cloudflare
40%
WooCommerce
20%
Tawk.to
20%
Moment.js
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15444FAE7E87C047A01D627C56088F7BABAE3A105DB844855B3FCA34DEBC6ED11B6160D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:OpnDGh4hZJ3NtZXBkzqFSAt9GM1n5/nhrc3G9XfEKu4O7g2kc9kakmqkkjk+qxu+:OcFVCSugFGvMwT+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:276915:AXI1AwWAFCVCUXJoACJEMFiIBEhBegYGKOUeKoAADIXEAAslBMGIbAAQiUIB0ACCJ1CAwIApRIKEDAYKSTkihOJ0UADFiECg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffd3d3c3c387df83
Perceptual Hash:bcccc393638634c7
Difference Hash:233326273b3f3b37
Wavelet Hash:fbd383838387c781
Color Hash:#80ac53

Other Hashes

Crop Resistant:233326273b3f3b37,9471469cc3c76f1e

Scan History

Scan history not available

Unable to load historical scan data