ScanMalware.com

Security Scan Report: grn.naralvin.com

Redirected to:
https://gr95--gransino.com/de/registration?mid=231025_1795006&fluid=16...
Site favicon
Submitted: Jul 19, 2026, 11:35:38 PMCompleted: Jul 19, 2026, 11:37:25 PMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 2 countries across 4 domains to perform 2 HTTP transactions. The main domain is gr95--gransino.com and was registered NaN years ago.

Submitted URL: https://grn.naralvin.com/?mid=231025_1795006

Effective URL: https://gr95--gransino.com/de/registration?mid=231025_1795006&fluid=1666a5c7-4a66-4952-a00a-a71b95b190a4Redirected

AI Security Verdict

Moderate Risk

Confidence: 85%

5
Risk Score

The site impersonates the Gransino brand on a very new, unranked domain without forms, indicating high‑risk phishing.

Risk Factors
Brand impersonation on mismatched domain
Very new unranked domain
Title-domain mismatch
Safety Factors
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 9 to 5
Rich gambling-platform content with same-origin account forms — this is an (illegal) gambling site's own front-end, not credential phishing of a third party; scam_type corrected from 'Brand Impersonation' to 'Illegal Gambling'
Domain age information unavailable

Details

Page Title

Gransino

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

gambling betting

(41%)

Domain Information

The domain 'grn.naralvin.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'grn'. Count 8 characters in 'naralvin' split between three vowels and five consonants. Word splitting yields two words: nar, alvin. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://grn.naralvin.com/?mid=231025_1795006

Page Load Overview

2.40s
Total Load Time
223
HTTP Requests
24
Domains
2.0 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de-de
Text Length:3,200 chars
Detector Agreement:33%

Website Classification

Primary Category

gambling betting41% confidence
Type: static
Method: ml+structural

All Detected Categories

gambling betting
41%
technology software
37%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
58185.207.196.148Marshall Islands
AS213846Nalmi Limited
55185.207.198.29Marshall Islands
AS213846Nalmi Limited
55104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
55142.251.20.95Google · CDNUnited States
AS15169Google LLC
2234--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C014D569BB7C853E4755C388DD70D88AA678CDC0D1B0D0B877E9662684DCAD2EC3C25E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:IzlMo+qZ9jMEVIkl58th0TMPS7/C0xeg6sDoZEglyTXfA+tj+oVjbhIXG1:IDn5/Tsx0x6sDoag0XfrjpKW1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:200075:jhESjBZzWgIAwOlQBDgRCWYoDAJVYkgQIQCRBDIRjZlCxYAYoUFOCGXGS4/xYLkEBHjMiETfABxjJAkEphQkgAjTpQBwAhLI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:34383c3c383c0400
Perceptual Hash:c6cd3c926db29269
Difference Hash:64606060606d6d12
Wavelet Hash:ff3c3c3c3c3c1818
Color Hash:#931f48

Other Hashes

Crop Resistant:64606060606d6d12

Scan History

Scan history not available

Unable to load historical scan data