Security Report: app.myhrtoolkit.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/31834f8a-612f-43d5-80ee-c460d1326ecc Domain and IP registration (RDAP)/api/v1/rdap/31834f8a-612f-43d5-80ee-c460d1326eccHow often this domain was scanned/api/v1/domain/stats/app.myhrtoolkit.com Scan history for this domain/api/v1/domain/history/app.myhrtoolkit.com?limit=15

This website contacted 7 IPs in 2 countries across 22 domains to perform 52 HTTP transactions. The main domain is myhrtoolkit.com and was registered 18 years ago.

Submitted URL: https://app.myhrtoolkit.com

Effective URL:

https://app.myhrtoolkit.com/user_portal/index.php?show_my_homepage=1

Redirected

The Cisco Umbrella rank of the primary domain is #783,417 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 72%

Risk Score

The site hosts a legitimate‑looking login for its own brand, but a critical XSS IDS alert and low domain ranking raise moderate concerns.

Risk Factors (3)

Critical IDS XSS alert indicating possible client‑side exploitation

Presence of a credential form without additional security measures

Safety Factors (4)

Domain is over 18 years old

Self‑branding matches domain (no brand impersonation)

No external form submission or credential exfiltration detected

No malicious JavaScript patterns identified

Domain age information unavailable

Details

Page Title

myhrtoolkit - login

Scan Type

public

Favicon Hash

MMH3: -399908414

MD5: c1794aca52d15094601fc768bae39c49

Domain Name Analysis

You're looking at domain 'app.myhrtoolkit.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'app'. The registrable portion 'myhrtoolkit' spans 11 characters with three vowels and eight consonants. It segments into three words: my, hr, toolkit. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.34s

Total Load Time

1.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:786 chars

Detector Agreement:100%

Website Classification

Primary Category

social_media50% confidence

Type: spa

Method: structural

All Detected Categories

social_media

50%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	104.16.138.209Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	172.66.159.89Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	192.178.183.97Google · CDN	United States	AS15169Google LLC
7	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	142.250.154.95Google · CDN	United States	AS15169Google LLC
7	172.67.142.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	188.166.153.58	Slough, England, United Kingdom	AS14061DigitalOcean, LLC
52	7	-	-