ScanMalware.com

Security Scan Report: aidingtruepola-securedtrupo.info

Redirected to:
https://aidingtruepola-securedtrupo.info/
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/338a2b06-9e1c-43a4-a2ec-720c8941931fDomain and IP registration (RDAP)/api/v1/rdap/338a2b06-9e1c-43a4-a2ec-720c8941931fHow often this domain was scanned/api/v1/domain/stats/aidingtruepola-securedtrupo.infoScan history for this domain/api/v1/domain/history/aidingtruepola-securedtrupo.info?limit=15
This website contacted 4 IPs in 1 country across 2 domains to perform 10 HTTP transactions. The main domain is aidingtruepola-securedtrupo.info and was registered 1 month ago.

Submitted URL: https://aidingtruepola-securedtrupo.info/c/W9Eo9gZURCh-S94t2Lf8cDf6eo9k2FMAVclTg7bUnQ0

Effective URL:
https://aidingtruepola-securedtrupo.info/
Redirected

AI Security Verdict

High Risk

Confidence: 90%

8
Risk Score

Impersonates OneDrive on a new, unranked domain, using Cloudflare challenge to cloak phishing content. No forms captured yet, but intent is credential theft.

Risk Factors (4)
Brand impersonation of Microsoft OneDrive
Young domain (35 days old)
Unranked domain with no established reputation
Cloudflare challenge used to hide potentially malicious content
Domain age information unavailable

Details

Page Title

Just a moment... | OneDrive

Scan Type

public

Domain Name Analysis

The domain name 'aidingtruepola-securedtrupo.info' uses the informational generic top-level domain (.info) and has no subdomain. The second-level label 'aidingtruepola-securedtrupo' is 27 characters long with 12 vowels and 14 consonants; it also includes 1 hyphen. Word splitting yields six words: aiding, true, pola, secured, tru, po. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

OneDrive Sign in Checking your browser .. Please wait a moment while we verify your connection. Verify you are human ctounFeane tivooy Hele Ray 1D: 72794fDS616007e2 Performance & secuty by Clouda...

Page Load Overview

1.98s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:243 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software67% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
67%
documentation technical
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.67.144.10Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.39.97Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
104--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15A52841E15F31056376390BC1B6757463A31C00B810EDE6CBE8D63889F8A699EEE37D8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:GuAkgboW6uowz1LiaZjam7YR8tBkscNoxMmV9y0sLGSPlyhZqhbRBZDkSs6vyJ2A:44PshBxqCLEpKnv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:13691:cGGB4gMCwBqDsqAEQC2BshADxRIQ4WbJJMyuDgqBwzAaAIqIBknQnGWIIBoAAphCUgAbhA6g5G3CAsGuIIS2AmVBSghIJCQh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffd8e0e0c0c0c0c0
Perceptual Hash:f7938c8ca2b3938c
Difference Hash:a021084c00080000
Wavelet Hash:fffcf8e0e0c0e0c0
Color Hash:N/A

Other Hashes

Crop Resistant:a021084c00080000

Scan History

Scan history not available

Unable to load historical scan data