ScanMalware.com

Security Scan Report: h84eh2glif.cfd

Redirected to: https://h84eh2glif.cfd/auth/login?redirect=/message

Submitted: Nov 11, 2025, 3:41:52 PMCompleted: Nov 11, 2025, 3:43:02 PMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 0 countries across 1 domain to perform 12 HTTP transactions. The main domain is h84eh2glif.cfd and was registered NaN years ago.

Submitted URL: https://h84eh2glif.cfd/

Effective URL: https://h84eh2glif.cfd/auth/login?redirect=/messageRedirected

AI Security Verdict

Unknown

Confidence: 95%

10
Risk Score

Highly suspicious credential‑harvesting site; avoid and report.

Risk Factors
Newly registered domain (<7 days) with login form
Password field without accompanying username/email field
Invalid SSL certificate causing security warning
Unranked, low‑reputation domain
Credential harvesting form on a suspicious site
Safety Factors
No malicious Indicators of Compromise matches found
Domain age information unavailable

Details

Page Title

Privacy error

Scan Type

public

Language

🇨🇳

Chinese

(60% confidence)

Category

phishing/scam

(40%)

Domain Information

The domain 'h84eh2glif.cfd' uses the .cfd top-level domain with no subdomain. The registrable portion 'h84eh2glif' spans 10 characters holding 2 vowels versus 5 consonants, along with 3 digits. Splitting it apart reveals 6 words: h, 84, eh, 2, gl, if. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://h84eh2glif.cfd/

Page Load Overview

11.43s
Total Load Time
12
HTTP Requests
1
Domains
1.6 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Language Code:zh
Detection Confidence:60%
Script Type:Han
HTML Lang Attribute:zh-CN
Text Length:33 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing/scam40% confidence
Type: static
Method: structural

All Detected Categories

phishing/scam
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1247.238.240.247UnknownUnknown
121--

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data