Security Scan Report: dpd.bio

Redirected to:
https://dpd.bio/#/login
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 2 domains to perform 8 HTTP transactions. The main domain is dpd.bio and was registered 11 months ago.

Submitted URL: https://dpd.bio

Effective URL:
https://dpd.bio/#/login
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Google Safe Browsing social engineering, an analyst-vetted tech-support browser-locker kit, and a critical hunting-rule match confirm this page is malicious; avoid interaction and report.

Risk Factors (5)
Known malicious tech-support browser-locker kit identified by analyst-vetted roster
Critical hunting rule malware detection for TechSupportScam_BrowserLocker
Google Safe Browsing social engineering detection
Credential-collecting login form present on a low-reputation domain
Page combines a login form with browser-locking social-engineering kit behavior
Domain age information unavailable

Details

Page Title

登录页 | 星途

Scan Type

public

Domain Name Analysis

The domain name 'dpd.bio' uses the .bio top-level domain. The registrable portion 'dpd' spans 3 characters containing 0 vowels alongside three consonants. It segments into 2 words: d, pd. Average segment length settles at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Si _2e. Be. BRN. [ Email [ Password @ | Register | Forgot password ® English

Page Load Overview

5.03s
Total Load Time
505 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:29%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:207 chars
Detector Agreement:50%
Language mismatch: Declared as zh-CN but detected as en

Website Classification

Primary Category

adult content51% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
51%
healthcare medical
38%
documentation technical
37%
news media journalism
36%
finance banking
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2172.67.195.77Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.92.155Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23.5.214.245Aws · CLOUDHong Kong, Hong Kong
AS16509Amazon.com, Inc.
23.5.214.213Aws · CLOUDHong Kong, Hong Kong
AS16509Amazon.com, Inc.
84--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C8C3D6F9FD40207A2F7786BD61CAD50C733B9181EF1AC971B5A2500092CE6F2E267E59

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:llhfNelOQRFYh04hUoQEEi3fx73jQia8JQ8:llhfNelOQRFYh04hUoQEEi3fx73jQb8T

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:129665:ITkIAlJICYwknF4JmYJqIBeCkCVBcwBQgCGzMjEQAAIFIQcQQEAQBWWRGAwAYANwgEiVB10CA0IwIABQUhIISSo1EiIl8ZAm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7e7ffff
Perceptual Hash:b366c999cc663332
Difference Hash:0810282a4c4c3008
Wavelet Hash:f0f0e0e0e0e0f0f0
Color Hash:N/A

Other Hashes

Crop Resistant:0810282a4c4c3008

Scan History

Scan history not available

Unable to load historical scan data