Security Scan Report: www.jlgv.fdalatvija.lv

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 4 domains to perform 23 HTTP transactions. The main domain is fdalatvija.lv.

Submitted URL: https://www.jlgv.fdalatvija.lv

AI Security Verdict

Moderate Risk

Confidence: 64%

5
Risk Score

Latvian-language login page branding itself 'PrimeHealth QR' on an unrelated unranked subdomain (jlgv.fdalatvija.lv). Credential form plus brand/domain mismatch; no malware or exfiltration evidence found, but do not enter credentials.

Risk Factors (3)
Brand claimed in title/meta ('PrimeHealth QR') does not match the hosting domain
Credential-collecting login form on an unranked domain of unknown age
Arbitrary subdomain on a low-reputation / .lv domain with no visible organizational context
Safety Factors (6)
No Indicators of Compromise matches in threat intelligence
No JavaScript malware / hunting-rule patterns and no known phishing kit in the kit roster
No network IDS alerts and no Google Safe Browsing hit
No cross-origin form submission and no credential exfiltration detected
No payment fields and no disguised password fields
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable

Details

Page Title

PrimeHealth QR: Log In

Scan Type

public

Domain Name Analysis

Domain 'www.jlgv.fdalatvija.lv' uses the Latvian country-code top-level domain (.lv) and includes subdomain 'www.jlgv'. Its registrable label 'fdalatvija' stretches across 10 characters containing 4 vowels alongside 6 consonants. Splitting it apart reveals four words: fda, la, tv, ija. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Log In Epasts: Parole: Aizmirsat paroli? O Login

Page Load Overview

1.20s
Total Load Time
356 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:118 chars
Detector Agreement:55%

All Detected Languages

🇺🇸en(81%)🇳🇴no(13%)🇩🇰da(6%)

Website Classification

Primary Category

healthcare medical66% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

healthcare medical
66%
technology software
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1785.31.98.135Latvia
AS43513Sia Nano IT
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5142.251.14.95Google · CDNUnited States
AS15169Google LLC
274.125.29.95Google · CDNUnited States
AS15169Google LLC
234--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13EB1AEB379DC88271B114590D0B6B22CA9FAE81BD81BED54BAFC81C53FD2ED84839754

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:n0hfZ/PkOTZHiZHw/AovT4PakE6lQlOU5mmIKMymCXVw3RH3AqFvYfkEE0D/:0hB3RTZHiZHwIo74ykE6eIU5mmIKbC5W

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5247:AAAIBEEAAYUBAHATQEFUgABoEUEQMAQZBAKAUmggfIQCECaIfAAwScwQMBAAoWIABAgAUMQUAAIAEAyCAAIICwjgJoCAqAAx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7f7f7f7f7f7f7f7f
Perceptual Hash:8066d9995576d999
Difference Hash:d4c4ccc4d0d0d0d0
Wavelet Hash:0e07070700000000
Color Hash:07007000000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data