Security Scan Report: mydpd.pdfxa.top

Redirected to:
https://mydpd.pdfxa.top/track-ch/#/%252Findex
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 11 HTTP transactions. The main domain is pdfxa.top and was registered 1 week ago.

Submitted URL: https://mydpd.pdfxa.top/track-ch/#%252Findex

Effective URL:
https://mydpd.pdfxa.top/track-ch/#/%252Findex
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Confirmed DPD parcel-delivery phishing page: 1-day-old .top domain impersonating DPD, flagged by Google Safe Browsing for social engineering and by IDS for hostile .top traffic.

Risk Factors (5)
Brand impersonation of DPD on a non-official domain
Newly registered domain (1 day old) on a .top TLD
Google Safe Browsing Social Engineering threat
High-severity IDS alerts for hostile .top domain activity
Urgency/social-engineering lure about failed parcel delivery and address verification
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'mydpd.pdfxa.top' uses the .top top-level domain; it also runs on subdomain 'mydpd'. The second-level label 'pdfxa' is 5 characters long containing one vowel alongside four consonants. Splitting it apart reveals 3 words: pdf, x, a. The median word length lands at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mydpd.pdfxa.top/track-ch/#%252Findex

Page Load Overview

2.02s
Total Load Time
442 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:41%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,393 chars
Detector Agreement:67%
Language mismatch: Declared as en but detected as de

Website Classification

Primary Category

social media network85% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
85%
technology software
63%
government public service
57%
adult content
50%
cryptocurrency blockchain
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11209.141.47.167Las Vegas, Nevada, United States
AS53667FranTech Solutions
111--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T171F38D3499012427963F9FD1A32537882F5AE34FC88649187D9C864BCFD7DA2F829C75

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Fa/4FZzB3WMBtIYdYuLWj/4FZ3B3WMBtIYdYuLEe:Fa/G/IYdYaWj/g/IYdYaEe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:168455:JQMgA7CCYECABooHwEbXBSsgVQNQyDEwBICMIAAQFYIhAClBAQMmJhhBTYGLQVcRLkgAgGeKMCoGQAXEEcEUAJ0cjxGFLi5W

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fbe3e1c1c3c3c3c7
Perceptual Hash:e9c9928c961bc736
Difference Hash:8303032b07233b0c
Wavelet Hash:fbe3c181c1c1c3c7
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data