ScanMalware.com

Security Scan Report: api-p6twygq2h.harveyblindsdocxdrop.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/418120cf-ba74-42e1-963e-bab5807e97f5Domain and IP registration (RDAP)/api/v1/rdap/418120cf-ba74-42e1-963e-bab5807e97f5How often this domain was scanned/api/v1/domain/stats/api-p6twygq2h.harveyblindsdocxdrop.comScan history for this domain/api/v1/domain/history/api-p6twygq2h.harveyblindsdocxdrop.com?limit=15
This website contacted 2 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is harveyblindsdocxdrop.com and was registered 2 weeks ago.

Submitted URL: https://api-p6twygq2h.harveyblindsdocxdrop.com/

AI Security Verdict

Moderate Risk

Confidence: 55%

5
Risk Score

Suspicious 'Human Verification' gate on a random subdomain with hidden redirect and eval; no credential form, brand impersonation, or threat-intel hits detected.

Risk Factors (4)
Randomly generated subdomain under an unknown domain
Fake human verification gate with hidden redirect field _captcha_redirect
eval() call in page JavaScript
Honeypot field hp_field
Safety Factors (4)
No password or payment fields
No brand impersonation detected
No Indicators of Compromise or YARA/IDS hits
Form action is same-origin
Domain age information unavailable

Details

Page Title

Human Verification

Scan Type

public

Domain Name Analysis

The domain name 'api-p6twygq2h.harveyblindsdocxdrop.com' uses the commercial generic top-level domain (.com) and includes subdomain 'api-p6twygq2h'. The registrable portion 'harveyblindsdocxdrop' spans 20 characters containing five vowels alongside 15 consonants. Word splitting yields 5 words: harvey, blinds, do, cx, drop. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://api-p6twygq2h.harveyblindsdocxdrop.com/

Page Load Overview

4.05s
Total Load Time
211 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:219 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1104.21.50.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.206.254Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C16402B34D8F1D5727129A2853EE8BC22D6C6B07C0BD84EDF64C81896F86191DAEF1D4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:jHfO6jdroD149a6+r4pbE33a7tWUwArLTz9UwU5As2W:ldroD6+rd33ahWdQb9u5AA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:306837:QAZEqFgJhQhkEgphYTBAlid7I2AAkCGaBhklpMARAKgEkQQAECYIogVBpofayDJgiAAxpYz4yoGsAUCBlggR6KIEwMJkgChM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:899c7761cd259c93
Difference Hash:e2ddb0b2b2b2ccd0
Wavelet Hash:001e3e3f79786c6c
Color Hash:#71bf40

Other Hashes

Crop Resistant:b08c8c96138686a0,e2ddb0b2b2b2ccd0

Scan History

Scan history not available

Unable to load historical scan data