Security Scan Report: qmdhr3b3wy.hdply.com

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 3 countries across 5 domains to perform 6 HTTP transactions. The main domain is hdply.com and was registered 4 months ago.

Submitted URL: https://qmdhr3b3wy.hdply.com/

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

Suspicious login form with a 'document locked' lure on a 126-day-old domain; no brand impersonation or exfiltration found, so moderate risk.

Risk Factors (3)
Credential harvesting login form
Social engineering lure (document locked)
Random subdomain on shared hosting platform
Safety Factors (5)
No impersonation of a known brand
No cross-origin form submission detected
No credential exfiltration detected
No malware patterns or threat intel matches
Domain age 126 days (not extremely new)
Domain age information unavailable

Details

Page Title

View Document

Scan Type

public

Domain Name Analysis

You're looking at domain 'qmdhr3b3wy.hdply.com' on the commercial generic top-level domain (.com), featuring subdomain 'qmdhr3b3wy'. Its registrable label 'hdply' stretches across 5 characters with zero vowels and 5 consonants. Segmentation suggests 2 words: hd, ply. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

— —_-_ — A —_—- .—— — eee _— -_— î — eee — — ENE ul ~- — a= oe = ps ‘—_- - _—_ — PDF DOCUMENT LOCKED! Sign in With Your Email To View the RFQ List Clearly — - —— -- Eel me el A Password | — —— - ă...

Page Load Overview

1.59s
Total Load Time
26 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:113 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical39% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
39%
phishing scam
36%
technology software
31%
government public service
31%
real estate property
26%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
613.125.51.81Aws · CLOUDSouth Korea
AS16509Amazon.com, Inc.
0195.80.159.133France
AS29152Decknet SARL
0142.251.110.101Google · CDNUnited States
AS15169Google LLC
0104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0163.181.254.185United States
AS24429Zhejiang Taobao Network Co.,Ltd
0142.251.110.100Google · CDNUnited States
AS15169Google LLC
0104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
67--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C0C1844A99E308967613E0F877E7760535609003DE45EA293FDC22B88F8ADD958B37CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nAU25DoncD93hxJWM7wc1ULNhoi+qiE2CiwGXv0/KNiWeol5hF:ZGsO93hxJW2YboiDiKi/BNiWechF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5826:AGDOAjgQM5AYwnVEEkCUSCCADRAoCRhSEDYHEABRQCiatUBEohIuAYgAERBhgAAAoA0ECEHjAFDgHABwQHLgEYBbiCSAKBkA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7c207fff7da4f87a
Perceptual Hash:cbb6497295c8b5c8
Difference Hash:d94561694949f1c2
Wavelet Hash:6c00f97f7c80f878
Color Hash:N/A

Other Hashes

Crop Resistant:d94561694949f1c2

Scan History

Scan history not available

Unable to load historical scan data