ScanMalware.com

Security Scan Report: onemotoring.vrlerpz.top

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/39b04c62-aa0b-41db-ba70-2df77a465a1bDomain and IP registration (RDAP)/api/v1/rdap/39b04c62-aa0b-41db-ba70-2df77a465a1bHow often this domain was scanned/api/v1/domain/stats/onemotoring.vrlerpz.topScan history for this domain/api/v1/domain/history/onemotoring.vrlerpz.top?limit=15
This website contacted 2 IPs in 1 country across 1 domain to perform 8 HTTP transactions. The main domain is vrlerpz.top and was registered 3 months ago.

Submitted URL: https://onemotoring.vrlerpz.top

AI Security Verdict

High Risk

Confidence: 74%

8
Risk Score

Brand-named 'onemotoring' subdomain on a new, unranked .top host reported as a phishing framework, with HIGH IDS hostile-*.top alerts. Site is currently down (Cloudflare 521), so no live form was captured, but the infrastructure is highly suspect.

Risk Factors (4)
Threat-intel report identifies the primary domain as a phishing framework
Brand-name subdomain (onemotoring) on a non-official .top domain
HIGH IDS alerts for hostile *.top domain traffic
Domain only 80 days old and unranked in Cisco Umbrella
Domain age information unavailable

Details

Page Title

vrlerpz.top | 521: Web server is down

Scan Type

public

Domain Name Analysis

Domain 'onemotoring.vrlerpz.top' uses the .top top-level domain and includes subdomain 'onemotoring'. The second-level label 'vrlerpz' is 7 characters long split between 1 vowel and six consonants. Segmentation suggests four words: v, rl, erp, z. Expect 1.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://onemotoring.vrlerpz.top

Page Load Overview

9.78s
Total Load Time
16 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:690 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical77% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
77%
technology software
69%
government public service
52%
cryptocurrency blockchain
47%
news media journalism
37%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
82--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10DE18671F1B512BA11A3C1923695EB6979E0C213CBEF4994B3DCC2732F9EE819903290

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:ljHjCIju2Da/D2KUuOG4Fh8/G4Fe6424Ff0+skKmk2OLwmNnwL5cFRM3naQxJ:ljHjDjuma/CqOey2VO/Q85cFO3aeJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6979:iQAAtrACCguFYgMACAI5iQByBQJRJFkRg5iwwYkCXDEFOKQIjKDxgRApIqAAakEcapiJuTEEDhpBSGAhIESGWsACBBAEMhAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c70000d7f7ffff
Perceptual Hash:b4389abc9a676531
Difference Hash:1c3e8e8a3406061c
Wavelet Hash:c7000000d7f3f7ff
Color Hash:#3a7865

Other Hashes

Crop Resistant:1c3e8e8a3406061c

Scan History

Scan history not available

Unable to load historical scan data