Security Scan Report: hponline.run.place

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 8 HTTP transactions. The main domain is run.place and was registered 4 years 4 months ago.

Submitted URL: https://hponline.run.place/ccaattss/

The Cisco Umbrella rank of the primary domain is #607,358 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 80%

7
Risk Score

Page hosts a malicious PowerShell script and matches content‑malware IoCs, warranting a high‑risk classification.

Risk Factors (3)
Malicious URL indicator on primary domain
High‑severity IDS alerts for dynamic DNS activity
Hosting of a PowerShell script file (crypted.ps1) on a public directory
Domain age information unavailable

Details

Page Title

Index of /ccaattss/

Scan Type

public

Domain Name Analysis

Domain 'hponline.run.place' uses the .place top-level domain with subdomain 'hponline'. Its registrable label 'run' stretches across 3 characters with one vowel and 2 consonants. Segmentation suggests one word: run. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hponline.run.place/ccaattss/

Page Load Overview

3.07s
Total Load Time
7 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:58%
Script:Latin
Direction:ltr

Detection Details

Text Length:209 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain85% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
85%
technology software
66%
documentation technical
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8185.244.151.84Bucharest, Bucharest, Romania
AS60117Host Sailor Ltd
81--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T199415561F4D1802B111365E49158BBEDF0C19178C3386E687DED05EAD7E0FB0885EED2

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:WfpITYQwXIj7iuQ2u36msz6QZXWErclDA14LrD:AEWQl4r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1880:AAJgFEAABAAAJQAgAAAAIAAAAAAQCAAAQAAAAAAAIAAAAAQAggYAAQQQAAACAgIAgAAIAAAgQAEFwCCAiAACAUIAAAAAAECA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1c3e000000000000
Perceptual Hash:9a9a9e3c39393938
Difference Hash:3068380000000000
Wavelet Hash:9efe8c80f0f0f0f0
Color Hash:#2dd29e

Other Hashes

Crop Resistant:3068380000000000

Scan History

Scan history not available

Unable to load historical scan data