ScanMalware.com

Security Scan Report: hdhelpfep.pages.dev

Site favicon
Submitted: Nov 23, 2025, 9:22:16 PMCompleted: Nov 23, 2025, 9:23:53 PMpubliccompleted
Loading additional data...

Summary

This website contacted 92 IPs in 3 countries across 17 domains to perform 42 HTTP transactions. The main domain is hdhelpfep.pages.dev.

Submitted URL: https://hdhelpfep.pages.dev/posts/hgnu-social-security-benefit-withholding-2024

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

High‑risk phishing site impersonating Social Security; confirmed scam.

Risk Factors
Brand impersonation of Social Security on a new, unranked domain
Presence of malicious Indicators of Compromise (highperformanceformat.com)
Domain age unknown/likely <90 days, increasing scam likelihood
Unranked domain suggests low reputation and possible typo‑squatting
Domain age information unavailable

Details

Page Title

Social Security Benefit Withholding 2024 - Sarah Glossop

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government public service

(40%)

Domain Information

Domain 'hdhelpfep.pages.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'hdhelpfep'. The second-level label 'pages' is 5 characters long split between two vowels and 3 consonants. Breaking it apart gives one word: pages. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hdhelpfep.pages.dev/posts/hgnu-social-security-benefit-withholding-2024

Page Load Overview

1.59s
Total Load Time
42
HTTP Requests
17
Domains
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:4,858 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service40% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
40%
corporate
35%
healthcare medical
34%
news/blog
30%
documentation technical
28%

Detected Features

Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22188.114.97.3United States
AS13335CLOUDFLARENET
2142.250.185.234United States
AS15169GOOGLE
2150.171.28.10United States
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
1104.17.47.19United States
AS13335CLOUDFLARENET
1142.4.219.198Canada
AS16276OVH SAS
1142.250.181.227United States
AS15169GOOGLE
1172.66.43.116United States
AS13335CLOUDFLARENET
1141.193.213.20United States
AS209242Cloudflare London, LLC
1192.124.249.27Menifee, California, United States
AS30148SUCURI-SEC
118.172.112.43United States
AS16509AMAZON-02
4292--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19DC2F9671A5D213E22E622C4B262734CD63BC834DF1388B97BB8A5185B55EB6C07705F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:FmB1BDBePfOLTVRu59VGd1WifWwKEG/AEo9nFMqSF3fRx/gDag4guxYHZKXH:FmB1BDBeaTVRu59Vq1bWwKEJp9nmfRx/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:27668:mICBmAq8U7SEM6FBIAoSA4LGBFRMlizS1QqEhoGARAEAI5yKCIA/AQwhILpKgSyQFSBXFQwUCSABQ3E8aKYkKWLHo0BUICZA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ff8f8f8f8f8387
Perceptual Hash:bfc1461c5b3c5962
Difference Hash:630e3b1b1b3f2f2f
Wavelet Hash:00e78f8f8f8f8383
Color Hash:#2d7d86

Other Hashes

Crop Resistant:630e3b1b1b3f2f2f,33d4cce41249b6b6,d4ece41249a6a6a6

Scan History

Scan history not available

Unable to load historical scan data