ScanMalware.com

Security Scan Report: ssl6.hrworks.de

Redirected to:
https://login.hrworks.de/?redirect=/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/765b1062-1313-4870-9d87-752288005228Domain and IP registration (RDAP)/api/v1/rdap/765b1062-1313-4870-9d87-752288005228How often this domain was scanned/api/v1/domain/stats/ssl6.hrworks.deScan history for this domain/api/v1/domain/history/ssl6.hrworks.de?limit=15
This website contacted 20 IPs in 1 country across 8 domains to perform 32 HTTP transactions. The main domain is hrworks.de.

Submitted URL: https://ssl6.hrworks.de

Effective URL:
https://login.hrworks.de/?redirect=/
Redirected

The Cisco Umbrella rank of the primary domain is #256,073 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

1
Risk Score

Legitimate HR WORKS customer login on the vendor's own 14-year-old hrworks.de domain; same-registrable-domain SSO, first-party credential form, no threat-intel or malware signals.

Safety Factors (5)
Self-branding: page presents HR WORKS, which is the host domain's own brand
Established domain (14 years old, registered 2012)
Same-registrable-domain SSO from ssl6.hrworks.de to login.hrworks.de
No IoC / YARA / IDS / Safe Browsing matches
No credential exfiltration or cross-origin JS sinks
Domain age information unavailable

Details

Page Title

HR WORKS Login - Customer Login for the cloud HR software

Scan Type

public

Domain Name Analysis

The domain 'ssl6.hrworks.de' uses the German country-code top-level domain (.de); it also runs on subdomain 'ssl6'. The second-level label 'hrworks' is 7 characters long holding 1 vowel versus 6 consonants. It segments into 2 words: hr, works. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ssl6.hrworks.de

Page Load Overview

3.81s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:291 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software64% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
64%
corporate business
40%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1318.245.31.6Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118.66.122.128Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1142.251.13.95Google · CDNUnited States
AS15169Google LLC
118.66.107.76Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1143.204.178.165Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
165.8.102.169Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118.66.137.207Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1143.204.178.185Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1143.204.178.127Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3220--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E7143B11EA84245B916F90DCADD683AD6B2D4062DF0EFDE4B488865CEFCC5A441F2FD8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:lt/BikFGO9aYABaeduos7LOrzidBNACoXg:ltckb9aYABaeduos7LOrzidBNACH

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:205195:UmRCV4xJwkAMCqBGKGDgCYOACSFlJuCMBQB4QBFcQaiqyEsC+UBIQQCCFphAACc0JDBJAA0IWKTIgC4YkwhBGQQAj1TgwBMX

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff3ff91f1ffffff
Perceptual Hash:eccc93936c1c9393
Difference Hash:60e6e42727180200
Wavelet Hash:7f73f79170123030
Color Hash:#6ce092

Other Hashes

Crop Resistant:60e6e42727180200,4016e0e9921c2020

Scan History

Scan history not available

Unable to load historical scan data