Security Scan Report: rds-login.org

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 3 domains to perform 23 HTTP transactions. The main domain is rds-login.org and was registered 3 months ago.

Submitted URL: https://rds-login.org

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Informational RDS-login guide with no forms or impersonation, but the primary domain carries a single-source 'bumblebee' malware report and the page uses disclosed fictional testimonials. Treat as untrusted.

Risk Factors (3)
Threat-intel entry naming the primary domain as a malware family (bumblebee) — single-source, unverified
Fabricated/fictionalized user testimonials presented as customer reviews
Title and meta description are tuned to 'RDS login / secure RDS login' keywords while the page offers no actual login service, attracting users searching for a real portal
Domain age information unavailable

Details

Page Title

Login to RDS | Remote Desktop

Scan Type

public

Domain Name Analysis

Within the non-profit oriented generic top-level domain (.org), 'rds-login.org' is registered without a subdomain. Its registrable label 'rds-login' stretches across 9 characters split between 2 vowels and 6 consonants, notching 1 hyphen. Splitting it apart reveals two words: rds, login. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

RDSPortal Home History Guides About us BROWSER-BASED WINDOWS WORKSPACES & RDS login 4 ee ~~ RDS Portal provides a clear starting point for authorized access to Windows desktops and applications p...

Page Load Overview

1.49s
Total Load Time
801 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:10,278 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(98%)🇫🇷fr(1%)🇷🇴ro(0%)🇪🇸es(0%)

Website Classification

Primary Category

documentation technical78% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
78%
technology software
70%
corporate
35%
government public service
30%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16103.149.169.104Amsterdam, North Holland, Netherlands
AS60781LeaseWeb Netherlands B.V.
7142.251.14.95Google · CDNUnited States
AS15169Google LLC
7142.250.154.94Google · CDNUnited States
AS15169Google LLC
233--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10DD2C83261E42537026351C7AA135B9BBEE3C04BE55B2A0071FE8BED0FD6D99CD1718A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:saIIi4OguZrq4T8c/6QAF2kXWmaB0iIyd82w42N1:VIIi4Og2G4T8c/HET

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28681:GWHBEkCaDA4BTA4VUcIxBMJJCCAIMFkEccGBiLUAgRaQmSAChAJBtThAC6SiytEi9ilEQMxmACPEgGWEIRkcAgxUChKUY+gO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fdfef999899191f9
Perceptual Hash:efd2c23e920e4ae1
Difference Hash:6924832333333383
Wavelet Hash:fcfcf191818191f1
Color Hash:070060000c0

Other Hashes

Crop Resistant:6924832333333383

Scan History

Scan history not available

Unable to load historical scan data