Security Scan Report: qbl-bd.com

Redirected to:
https://qbl-bd.com/wp-includes/document/rdyy/download.html
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 4 domains to perform 10 HTTP transactions. The main domain is qbl-bd.com and was registered 10 years ago.

Submitted URL: https://qbl-bd.com/wp-includes/document/rdyy/index.html

Effective URL:
https://qbl-bd.com/wp-includes/document/rdyy/download.html
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Known malicious fake Adobe document-download kit on a compromised WordPress site, delivering a remote-management agent; avoid and report.

Risk Factors (5)
Compromised WordPress site hosting malicious content under /wp-includes/ path
Analyst-vetted known malicious Adobe-secure-document RMM phishing kit
Fake Adobe encrypted-document download lure
External IP lookup to ipify.org consistent with anti-analysis or visitor filtering
Adobe brand impersonation on a non-Adobe domain
Domain age information unavailable

Details

Page Title

Background Image Page

Scan Type

public

Domain Name Analysis

Domain 'qbl-bd.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'qbl-bd' is 6 characters long containing 0 vowels alongside 5 consonants, notching one hyphen. It segments into three words: qb, l, bd. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Adobe ceativitysDesignv PDF &E-signatures Home Eo les 0” Marketing & Commerce ¥ Leam & Support v <a @ 4Q, Shared with you @ Projects {B Libraries & brands @ Review links WH Deleted Launch...

Page Load Overview

1.47s
Total Load Time
158 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:344 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking47% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
47%
documentation technical
42%
healthcare medical
35%
government public service
32%
news media journalism
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
268.183.228.27Singapore, Singapore
AS14061DigitalOcean, LLC
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
2104.26.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
2104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
105--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14261415BA9F7045B390790716BF36B066665C003D20ECA693FBD72A8CF84A9494B73CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nBr+5LMAFtyizQfYn9lPh7TsF7tXtB2St8y7euXDc:nBr0z9zQfk9lFoF7tXtgSHeuXDc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3307:AEgQAAFMBEMMGGAAgAEBRABAIAACAgBGIhEkAAEAApFQiBABAmAFAACggQAACDIEgAAAAAgAAgiAIAAAiAiEECBgAAALAooA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00001c3c3c3c0000
Perceptual Hash:9c1c6363e59c9c9c
Difference Hash:ccb23232b2aab084
Wavelet Hash:001e3e3e3e3e3c3c
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data