Security Scan Report: liopcwza.work

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is liopcwza.work and was registered 1 month ago.

Submitted URL: https://liopcwza.work

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Fake OneDrive file-sharing page on a 26-day-old domain, pushing an off-site password-protected ZIP; domain flagged by multiple feeds as a stealer. Do not download or enter the archive password.

Risk Factors (5)
Impersonation of the OneDrive/Microsoft brand on an unrelated domain
Multi-source threat-intel indicator: unknown stealer malware on the primary domain
Password-protected ZIP payload hosted off-site, pushed via a fake 'file link ready' page
Very new (26 days) and unranked domain
IDS alerts for suspicious .work domain traffic
Domain age information unavailable

Details

Page Title

OneDrive - Copy Link

Scan Type

public

Domain Name Analysis

The domain name 'liopcwza.work' uses the .work top-level domain without a subdomain. Its registrable label 'liopcwza' stretches across 8 characters containing 3 vowels alongside 5 consonants. It segments into four words: lio, pc, w, za. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://liopcwza.work

Page Load Overview

0.50s
Total Load Time
4 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:275 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software43% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
43%
documentation technical
34%
download file sharing
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DCF131A366A30841355B98A97FE79B477258A003800AC6647FCC63CC8FC65D1EDB3B9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Sj48+KNGFpiFAxByybXsaQPJ6zDn4oyXr:f8qFr3Z46zDn4B

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7710:MDEI8AhiDGBEZigBCAQA1R4CgDgWBbhAjbRRggA9D1ECJCACEIBCZIEkJQxIDABoCBHF4cJgsUBkEOgA5A4AmMxEAxAIAAo1

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfcfcfcfcfffff
Perceptual Hash:b939c6c66cce3131
Difference Hash:6498999a9a982010
Wavelet Hash:f7cfc7cb0c0c2410
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data