ScanMalware.com

Security Scan Report: hpromise.hyundai-motom.ru

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/da7dd46e-e862-4423-be7b-cdbd7461ee45Domain and IP registration (RDAP)/api/v1/rdap/da7dd46e-e862-4423-be7b-cdbd7461ee45How often this domain was scanned/api/v1/domain/stats/hpromise.hyundai-motom.ruScan history for this domain/api/v1/domain/history/hpromise.hyundai-motom.ru?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 7 HTTP transactions. The main domain is hyundai-motom.ru.

Submitted URL: https://hpromise.hyundai-motom.ru/wp-God/adobe/[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Adobe-branded credential phishing page hosted on a Hyundai-dealer subdomain; Safe Browsing flags it for social engineering and it captures a password to a local req.php form. Do not enter credentials.

Risk Factors (5)
Brand impersonation of Adobe on a non-Adobe domain
Credential-harvesting login form with a password field
Google Safe Browsing Social Engineering detection
Lure email parameter in the URL and obfuscated path on a compromised-looking WordPress install
Unranked domain claiming a major brand
Domain age information unavailable

Details

Page Title

Order catalogue

Scan Type

public

Domain Name Analysis

The domain 'hpromise.hyundai-motom.ru' uses the Russian country-code top-level domain (.ru) with subdomain 'hpromise'. Its registrable label 'hyundai-motom' stretches across 13 characters split between 5 vowels and seven consonants; it also includes one hyphen. Tokenizing the label suggests three words: hyundai, moto, m. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hpromise.hyundai-motom.ru/wp-God/adobe/?email=3mail@b.c

Page Load Overview

1.95s
Total Load Time
97 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:56%
Script:Latin
Direction:ltr

Detection Details

Text Length:282 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software70% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
70%
corporate business
53%
documentation technical
44%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
787.76.8.76Ulyanovsk, Ulyanovsk Oblast, Russia
AS50716Telecom.ru Ltd
71--

Detected Technologies3

PasswordField
100%
UNIX
40%
jQuery
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14DC16321B2E4254EF05288A4FA60AFDB1EC2815B8B1E0D54B99D78BEDF855D14C333ED

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:4eI/ncr4p/jIP77HGb/WoCEOBpesoAjZXSocBy1foXWQz21IG6sbX53Ieo0Tj:XI/nm4ZjMYzQZHuXMn1Yz0Tj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5721:BBBiIyEgEIABQIBCAEAEBECHAYBUEBKBhDgDYOgAcGAyBAIoDIwQEEAEZB0VCAJlAABRIoixAAhgRAfSGSEBA4AIhQCACACA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:01ffe767e7c7ffbf
Perceptual Hash:b7252d3c2b2d2c2d
Difference Hash:360c964d0d2c2c6b
Wavelet Hash:00e7c325e587971f
Color Hash:#d2c679

Other Hashes

Crop Resistant:360c964d0d2c2c6b,911111809101a181

Scan History

Scan history not available

Unable to load historical scan data