Security Scan: Index of /masabik288/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f48b4433-e86d-4501-8228-cbeb957951be Domain and IP registration (RDAP)/api/v1/rdap/f48b4433-e86d-4501-8228-cbeb957951beHow often this domain was scanned/api/v1/domain/stats/hponline.run.place Scan history for this domain/api/v1/domain/history/hponline.run.place?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 7 HTTP transactions. The main domain is run.place and was registered 4 years 4 months ago.

Submitted URL: https://hponline.run.place/masabik288/

The Cisco Umbrella rank of the primary domain is #607,358 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 60%

Risk Score

Open directory on dynamic DNS host serving a PowerShell script; flagged IP and IDS alerts increase suspicion, but no confirmed malware or phishing. Treat with caution.

Risk Factors (2)

Open directory index exposing a downloadable PowerShell script (secured_stub.ps1)

Hosted on a dynamic DNS domain with IDS alerts for dynamic DNS usage (*.run.place)

Safety Factors (5)

Domain registered 4+ years ago (base domain run.place)

No credential or payment forms detected

No brand impersonation detected

No YARA malware patterns detected

No cross-origin credential exfiltration detected

Domain age information unavailable

Details

Page Title

Index of /masabik288/

Scan Type

public

Domain Name Analysis

The domain 'hponline.run.place' uses the .place top-level domain and includes subdomain 'hponline'. The registrable portion 'run' spans 3 characters holding 1 vowel versus two consonants. Splitting it apart reveals 1 word: run. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.81s

Total Load Time

7 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:31%

Script:Latin

Direction:ltr

Detection Details

Text Length:194 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software78% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

78%

cryptocurrency blockchain

71%

documentation technical

62%

government public service

38%

news media journalism

38%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	185.244.151.84	Bucharest, Bucharest, Romania	AS60117Host Sailor Ltd
7	1	-	-

Detected Technologies2

LiteSpeed

40%

HTTP/3

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C8312261F4C1D47A122672D99028B79DE0C15168C3686E2C7DE4419AE7E0FB4986EDC1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:haHkMfACZCL+8MAVGMLVmJRA3ZOJXetj7iuQ2u36DqscyMy6QXqHwTyMijAS06Ny:WfpIwJXIj7iuQ2u36msz6QaHwacW4LrD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1677:AABAAAAAAAAABQAgCQABAEIAAAAEAAUAAAAAAAAAAAAAAAAAIAYEQAAAgABAAgIgAAEAAIAoCAACgAAAAAAAAAYAABIAAACA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0c3c002000000000

Perceptual Hash:9a9a983879793939

Difference Hash:3068122000000000

Wavelet Hash:0e7e8ccc0f0f0f0f

Color Hash:#2d864f

Other Hashes

Crop Resistant:3068122000000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: hponline.run.place