Security Scan Report: rdp-login.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 3 domains to perform 20 HTTP transactions. The main domain is rdp-login.com and was registered 3 months ago.

Submitted URL: https://rdp-login.com

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

Domain rdp-login.com carries a single unverified threat-intel match as the Bumblebee malware family on its primary domain, combined with a 40-day-old registration and no reputation. No credential or payment forms are present, so it scores HIGH_RISK rather than CONFIRMED_SCAM.

Risk Factors (4)
Primary domain flagged as Bumblebee malware in threat intelligence
Domain registered only 40 days ago (NEW category, 1.5x multiplier)
Unranked domain with negligible legitimacy signals (8/100)
Impersonation-adjacent RDP/Remote Desktop branding on a non-vendor domain
Domain age information unavailable

Details

Page Title

Login to RDP

Scan Type

public

Domain Name Analysis

Domain 'rdp-login.com' uses the commercial generic top-level domain (.com) and has no subdomain. The core label 'rdp-login' covers 9 characters containing two vowels alongside 6 consonants, plus 1 hyphen. It segments into 3 words: rd, p, login. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rdp-login.com

Page Load Overview

6.25s
Total Load Time
1022 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:11,923 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software73% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
73%
documentation technical
41%
corporate
35%
government public service
33%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8103.149.169.106Amsterdam, North Holland, Netherlands
AS60781LeaseWeb Netherlands B.V.
6142.251.20.94Google · CDNUnited States
AS15169Google LLC
6142.251.110.95Google · CDNUnited States
AS15169Google LLC
203--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T138F2832261F4263312A391C6AB135B4BBFA1D417D54F1A0432FE4BED0FDBD9AD81318A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:pzIIRpP/QHa08c4hsh1f9oKUIyd82weENJ:dIIRpP/QHa0H3X

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:34723:TkgAiJirCFRMbERsOCiAINQJQJGAUTeAWuQTKpYMiIZHCoxSQQEBABBeHCANAnxiAmOcQtRcB1SQABAqRxmomrgAiHDQAEeQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000400ffffff
Perceptual Hash:b212eded59929c2c
Difference Hash:96c7cc89c7280e16
Wavelet Hash:0021074c00ffffff
Color Hash:#4840bf

Scan History

Scan history not available

Unable to load historical scan data