Security Scan Report: grn.naralvin.com

Redirected to:
https://gr95--gransino.com/de/registration
Site favicon
Submitted: Jul 12, 2026, 11:19:15 AMCompleted: Jul 12, 2026, 11:21:04 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 2 countries across 4 domains to perform 2 HTTP transactions. The main domain is gr95--gransino.com and was registered NaN years ago.

Submitted URL: https://grn.naralvin.com/?mid=231025_1795006

Effective URL: https://gr95--gransino.com/de/registrationRedirected

AI Security Verdict

Moderate Risk

Confidence: 85%

5
Risk Score

The site impersonates the Gransino gambling brand on a brand‑new, unranked domain without any login forms, indicating a high‑risk phishing page.

Risk Factors
Very new (20‑day) domain
Unranked / low reputation domain
Brand mismatch (impersonation of Gransino)
Gambling content on a newly created site
Safety Factors
No credential or payment forms detected
No IoC or IDS alerts
No known malicious JavaScript patterns
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 9 to 5
Rich gambling-platform content with same-origin account forms — this is an (illegal) gambling site's own front-end, not credential phishing of a third party; scam_type corrected from 'Brand Impersonation' to 'Illegal Gambling'
Domain age information unavailable

Details

Page Title

Gransino

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

gambling betting

(41%)

Domain Information

The domain name 'grn.naralvin.com' uses the commercial generic top-level domain (.com) with subdomain 'grn'. Its registrable label 'naralvin' stretches across 8 characters with three vowels and five consonants. It segments into 2 words: nar, alvin. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://grn.naralvin.com/?mid=231025_1795006

Page Load Overview

5.76s
Total Load Time
164
HTTP Requests
23
Domains
639 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de-de
Text Length:3,200 chars
Detector Agreement:33%

Website Classification

Primary Category

gambling betting41% confidence
Type: static
Method: ml+structural

All Detected Categories

gambling betting
41%
technology software
37%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
41185.207.197.169Marshall Islands
AS213846Nalmi Limited
41104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
41185.207.196.137Marshall Islands
AS213846Nalmi Limited
41142.250.154.95Google · CDNUnited States
AS15169Google LLC
1644--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F614D669BB7C953E4755C388DD70D88A6678CDC0D0B0C0B867EA662684DCAD2EC3D25F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:RMldV+qZ9jMEVIkl58th0TMPS7/C0xeg6sDoZEglyTXfA+tj+oVjbhIXG1:RKn5/Tsx0x6sDoag0XfrjpKW1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:198149:IkKbIMgRMAFTKRAgenEHk0OGBMFDaBVYC0hgYFpTKxKQEgAw3JoIKQoAs4wQkScBjSAPqO7IBECEIkGYI2AItkIoRPCiTkbG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:34383c3c383c0400
Perceptual Hash:c6cd3c926db29269
Difference Hash:64606060606d6d12
Wavelet Hash:ff3c3c3c3c3c1818
Color Hash:#742d86

Other Hashes

Crop Resistant:64606060606d6d12

Scan History

Scan history not available

Unable to load historical scan data