Security Scan Report: uptpsbdg.com

Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 1 domain to perform 2 HTTP transactions. The main domain is uptpsbdg.com and was registered 5 years ago.

Submitted URL: https://uptpsbdg.com

AI Security Verdict

High Risk

Confidence: 86%

8
Risk Score

Blank page running obfuscated scripts that pull their next stage from a blockchain contract (EtherHiding) and hide hosts flagged as known-attacker and Vidar-malware; primary domain also carries a malware threat-intel report. Avoid.

Risk Factors (5)
EtherHiding: script resolves its next-stage payload address from a blockchain smart contract
Deliberately obfuscated JavaScript concealing blockchain RPC hosts, including one flagged as a known attacker and one flagged for the Vidar infostealer
Threat-intel malware classification on the primary domain (single-source, unverified)
Empty/blank page with no text content but active blockchain network behaviour — inconsistent with any legitimate purpose
Network activity directed exclusively at Binance Smart Chain testnet nodes rather than any user-facing service
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'uptpsbdg.com' uses the commercial generic top-level domain (.com) with no subdomain. The core label 'uptpsbdg' covers 8 characters with one vowel and 7 consonants. Splitting it apart reveals 3 words: up, tps, bdg. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://uptpsbdg.com

Page Load Overview

1.49s
Total Load Time
55 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2103.127.98.16Bogor, West Java, Indonesia
AS133800PT Biznet Gio Nusantara
015.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
03.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
035.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
03.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
28--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T198936B36341F2039429331A274DB9C09F584572764EB90F3F29E8A34B8FE798927765B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:pLFkG6BySdZOV4lPxmnp1fxkqnxZYDR3bU9xrwrsOdmdnetctwdK11+OLcXGrasW:pLWG+eVqPx+kMZYDR3ExsrsOAdneutwL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:96777:cAKIe0Q/SGxguQAACYHbAALGDPS5FWuMGEgQwUNaSQoFYSyUQVS0CheUlwS4CoUREQQTLQApgPAElKGMaJKpyHIhAhYmNgAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data