ScanMalware.com

Security Scan Report: hpromise.hyundai-motom.ru

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/876d2ea6-9f00-4fd8-9c96-ab1d2880143cDomain and IP registration (RDAP)/api/v1/rdap/876d2ea6-9f00-4fd8-9c96-ab1d2880143cHow often this domain was scanned/api/v1/domain/stats/hpromise.hyundai-motom.ruScan history for this domain/api/v1/domain/history/hpromise.hyundai-motom.ru?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 7 HTTP transactions. The main domain is hyundai-motom.ru.

Submitted URL: https://hpromise.hyundai-motom.ru/wp-God/adobe/[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Adobe-branded credential phishing page on a non-Adobe domain (hpromise.hyundai-motom.ru) that asks users to 'confirm identity' and sign in to view a document, harvesting a password. Do not enter credentials.

Risk Factors (4)
Impersonation of Adobe's brand and sign-in styling on a domain Adobe does not own
Credential (password) capture form presented as an Adobe document sign-in
Deceptive hostname/path structure (/wp-God/adobe/) on an unrelated domain
Domain unranked in Cisco Umbrella top 1M with no legitimacy signals (legitimacy score 10/100)
Domain age information unavailable

Details

Page Title

Order catalogue

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'hpromise.hyundai-motom.ru' is registered; it also runs on subdomain 'hpromise'. The second-level label 'hyundai-motom' is 13 characters long with 5 vowels and seven consonants, plus one hyphen. Breaking it apart gives 3 words: hyundai, moto, m. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hpromise.hyundai-motom.ru/wp-God/adobe/?email=3mail@b.c

Page Load Overview

1.80s
Total Load Time
97 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:56%
Script:Latin
Direction:ltr

Detection Details

Text Length:282 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software70% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
70%
corporate business
53%
documentation technical
44%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
787.76.8.76Ulyanovsk, Ulyanovsk Oblast, Russia
AS50716Telecom.ru Ltd
71--

Detected Technologies3

PasswordField
100%
UNIX
40%
jQuery
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14DC16321B2E4254EF05288A4FA60AFDB1EC2815B8B1E0D54B99D78BEDF855D14C333ED

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:4eI/ncr4p/jIP77HGb/WoCEOBpesoAjZXSocBy1foXWQz21IG6sbX53Ieo0Tj:XI/nm4ZjMYzQZHuXMn1Yz0Tj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5721:BBBiIyEgEIABQIBCAEAEBECHAYBUEBKBhDgDYOgAcGAyBAIoDIwQEEAEZB0VCAJlAABRIoixAAhgRAfSGSEBA4AIhQCACACA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:01ffe767e7c7ffbf
Perceptual Hash:b7252d3c2b2d2c2d
Difference Hash:360c964d0d2c2c6b
Wavelet Hash:00e7c325e587971f
Color Hash:#78773a

Other Hashes

Crop Resistant:360c964d0d2c2c6b,911111809101a181

Scan History

Scan history not available

Unable to load historical scan data