ScanMalware.com

Security Scan Report: pofm.iformbuilder.com

Redirected to: https://identity.zerionsoftware.com/app/?sid=5d53198d9b574b4f153d3192&server_id=pofm&redirect=https%3A%2F%2Fpofm.iformbuilder.com%2Fexzact%2FdataViews.php

Site favicon
Submitted: Jan 16, 2026, 3:27:23 PMCompleted: Jan 16, 2026, 3:28:37 PMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 2 countries across 4 domains to perform 33 HTTP transactions. The main domain is identity.zerionsoftware.com and was registered NaN years ago.

Submitted URL: https://pofm.iformbuilder.com

Effective URL: https://identity.zerionsoftware.com/app/?sid=5d53198d9b574b4f153d3192&server_id=pofm&redirect=https%3A%2F%2Fpofm.iformbuilder.com%2Fexzact%2FdataViews.phpRedirected

The Cisco Umbrella rank of the primary domain is #470,653 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Phishing login page impersonating Zerion; do not enter credentials.

Risk Factors
Hidden password field (credential harvesting technique)
Brand impersonation of Zerion on low‑ranking domain
Login page with password fields on a suspicious subdomain
Low Cisco Umbrella ranking for a site claiming a well‑known brand
Domain age information unavailable

Details

Page Title

Login

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

corporate business

(56%)

Domain Information

Within the commercial generic top-level domain (.com), 'pofm.iformbuilder.com' is registered and includes subdomain 'pofm'. Count 12 characters in 'iformbuilder' containing five vowels alongside seven consonants. Breaking it apart gives three words: i, form, builder. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pofm.iformbuilder.com

Page Load Overview

4.34s
Total Load Time
31
HTTP Requests
4
Domains
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:428 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business56% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
56%
technology software
51%
documentation technical
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1016.15.207.146Ashburn, Virginia, United States
AS14618AMAZON-AES
73.11.77.231City of London, England, United Kingdom
AS16509AMAZON-02
7172.217.23.99United States
AS15169GOOGLE
752.204.216.155Ashburn, Virginia, United States
AS14618AMAZON-AES
314--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BAC4EE90BE263A1E2AF2471EC0D7F26EB3587144D62D7E55F6AD1148CF6DA02C52BB30

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:794mhZRIEFXTqPO+DpHj6ZkihBhhqoMahi3eHtKXIg6scfdEnJoG8K/oQ4AQBWLS:nCP0V6xwXwLM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:561220:QADfADASCBoGwBgA4kQYCYCjQYKImCQBtzGdAAYwGABOBqJjREBEsbQAiGAYQSCUoNcH5g+EgoEAsBmMJBCsDEBxBMCpNRIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffefe7e7efe7e7ff
Perceptual Hash:e666999999666631
Difference Hash:000c4d0c140c0c00
Wavelet Hash:0f0707072727071f
Color Hash:#40bfae

Other Hashes

Crop Resistant:000c4d0c140c0c00

Scan History

Scan history not available

Unable to load historical scan data