This domain is used to host fraudulent pages that mimic the official Romanian government payment portal, Ghișeul.ro, to deceive users and harvest sensitive information.
- Specialization
- government service impersonation
- Registered
- Jul 5, 2025
Domain Age
11 Months
Tranco Rank
Unranked
Hosting Provider
Cloudflare, Inc.
Threat History
Issues Found
This domain is used to host fraudulent pages that mimic the official Romanian government payment portal, Ghișeul.ro, to deceive users and harvest sensitive information.
URLert analyzed recent scan activity for hdlhw.com and found 1 result.
| Status | Target URL | Type | Time |
|---|---|---|---|
| Dangerous | https://hdlhw.com/ro?ned=*** | 19h ago |
Historical and current IP address mappings for this domain.
| IP Address / Hosting | Status | Subdomains | Last Seen |
|---|---|---|---|
Hosted by: Cloudflare, Inc. (AS13335) | Active | hdlhw.com | 19 hours ago |
Hosted by: Cloudflare, Inc. (AS13335) | Active | hdlhw.com | 19 hours ago |
Received a suspicious link? Paste the full link to investigate.
Access this classification data programmatically via our API.
{
"domain": "hdlhw.com",
"confidence": "high",
"category": {
"purpose": "potentially_malicious",
"specialization": "government service impersonation"
},
"identity": {
"headline": "Phishing site impersonating Romanian government payment portal",
"summary": "This domain is used to host fraudulent pages that mimic the official Romanian government payment portal, Ghișeul.ro, to deceive users and harvest sensitive information.",
"operator": null,
"parent_entity": null,
"topics": [
"phishing",
"government impersonation",
"scam",
"fraud",
"Ghișeul.ro"
]
},
"functions": {
"is_ugc_platform": false,
"is_file_host": false,
"is_url_shortener": false,
"is_public_idp": false,
"is_crypto_platform": false,
"allows_user_subdomains": false,
"is_form_builder": false,
"is_document_host": false
},
"facts": {
"registered_date": "2025-07-05T12:29:55Z",
"rank": null,
"hosting_provider": "Cloudflare, Inc."
}
}