ScanMalware.com

Security Scan Report: www.halleyweb.com

Redirected to:
https://www.halleyweb.com/c057024/hh/login.php
Site favicon
Submitted: May 27, 2026, 2:12:47 PMCompleted: May 27, 2026, 2:13:56 PMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 27 HTTP transactions. The main domain is halleyweb.com and was registered NaN years ago.

Submitted URL: https://www.halleyweb.com/c057024/hh/index.php?jvs=0&acc=1

Effective URL: https://www.halleyweb.com/c057024/hh/login.phpRedirected

The Cisco Umbrella rank of the primary domain is #874,621 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 92%

5
Risk Score

The site impersonates a regional government portal, uses a low‑ranked domain and a password‑only form, indicating confirmed credential phishing.

Risk Factors
Low Cisco Umbrella ranking for a claimed public‑service brand
Password‑only field suggests credential harvesting
Domain does not match official government TLD for the brand
Absence of username field increases phishing likelihood
Safety Factors
Domain age > 17 years (well‑established)
No malicious JavaScript YARA matches
No network IDS alerts or external malicious links
Established domain (6201 days old) with no strong malicious indicators — risk clamped from 9 to 5
Domain age information unavailable

Details

Page Title

Configni

Scan Type

public

Language

🇮🇹

Italian

(80% confidence)

Category

documentation technical

(98%)

Domain Information

Domain 'www.halleyweb.com' uses the commercial generic top-level domain (.com), featuring subdomain 'www'. The second-level label 'halleyweb' is 9 characters long split between 3 vowels and 6 consonants. Splitting it apart reveals two words: halley, web. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.halleyweb.com/c057024/hh/index.php?jvs=0&acc=1

Page Load Overview

2.73s
Total Load Time
27
HTTP Requests
1
Domains
2.2 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:it
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:it
Text Length:744 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical98% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
98%
technology software
55%
government public service
41%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
27195.78.210.236Italy
AS3302Retelit Digital Services S.p.A.
271--

Detected Technologies3

X-UA-Compatible
100%
PasswordField
100%
jQuery
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E143E885F7CC2E2B81037159EC2F91CCB13FA478E651449EBEADD0E91CE58299236E74

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:wbDgGB7d7nheYRd9883si7guOeFOQz2Q0nnHXmA6y:wp7nZRZOeFOAy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:56632:FCFAmRlFoBhARgl3ESGIrogQAzQQlq5AFOwB4OYKDgoAnwQhUJAkmocACC8mjIAQOkh0NQVeACtCADI7gkM1EswS7yLGEF1R

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffffffe700
Perceptual Hash:f2096aa348b79cdc
Difference Hash:83839c1c140c0d31
Wavelet Hash:0000ffffffff0000
Color Hash:#5d783a

Other Hashes

Crop Resistant:83839c1c140c0d31,a18131caca218191,1008303232100800,0121014101214101

Scan History

Scan history not available

Unable to load historical scan data