ScanMalware.com

Security Scan Report: helaed.com

Bot Protection Detected

This website is protected by Cloudflare bot protection. The screenshot and page details below show the page as it was captured.

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bd1185b7-9b63-44b5-a5c2-df98034e3cdbDomain and IP registration (RDAP)/api/v1/rdap/bd1185b7-9b63-44b5-a5c2-df98034e3cdbHow often this domain was scanned/api/v1/domain/stats/helaed.comScan history for this domain/api/v1/domain/history/helaed.com?limit=15
This website contacted 4 IPs in 1 country across 2 domains to perform 21 HTTP transactions. The main domain is helaed.com and was registered 11 months ago.

Submitted URL: https://helaed.com

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Primary domain flagged as an unknown stealer by two independent threat feeds, combined with 68 eval() calls and obfuscated encoding scripts. No credential forms, but treat as malware-hosting infrastructure — do not visit or download anything.

Risk Factors (5)
Multi-source threat-intel match flagging the primary domain as a malware/stealer host
68 eval() calls with encoding/decoding inline script functions (obfuscated dynamic code execution)
Circular redirect chain
Unranked domain with no legitimacy indicators despite moderate age
Content served differently to datacenter scanner vs real client (evasion-capable behaviour)
Domain age information unavailable

Details

Page Title

Verification Requiredother network

Scan Type

public

Domain Name Analysis

The domain name 'helaed.com' uses the commercial generic top-level domain (.com). The registrable portion 'helaed' spans 6 characters containing three vowels alongside three consonants. Segmentation suggests 3 words: he, la, ed. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://helaed.com

Page Load Overview

5.08s
Total Load Time
806 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:374 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
77%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
214--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12AD1C7563AA71011E48391A53BBAC7493A64E213D64FC8A87FDC7118CF89ED59CA3B1C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:tIGk/xg86UwemeWYC0nrdy/cUyJ0HNLtTxnx/9g:tIgtLdxnx/C

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6218:dEJBSAAHwAAGEzHEAAhTIIRgIBABaIAgkAXAAlBAnygQOMASkADTAoAUkAAMtTET4AqhCAhWgPiHg5AADoABJHZQiAEQosgI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffe7e7ffff
Perceptual Hash:b3cccc3399cc2633
Difference Hash:0000001008080000
Wavelet Hash:33331b1bc0c0fcfc
Color Hash:#2d5ed2

Other Hashes

Crop Resistant:0000001008080000

Scan History

Scan history not available

Unable to load historical scan data