ScanMalware.com

Security Scan Report: prsnrw.de

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/10196b10-9fc2-4e2c-8813-9ed8a8a43838Domain and IP registration (RDAP)/api/v1/rdap/10196b10-9fc2-4e2c-8813-9ed8a8a43838How often this domain was scanned/api/v1/domain/stats/prsnrw.deScan history for this domain/api/v1/domain/history/prsnrw.de?limit=15
This website contacted 10 IPs in 2 countries across 3 domains to perform 13 HTTP transactions. The main domain is prsnrw.de and was registered 2 months ago.

Submitted URL: https://prsnrw.de/eftpack/

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Confirmed malicious fake 'PDF Viewer' page impersonating Adobe; the offered Acrobat Reader installer is a remote-access agent. Do not download or run anything.

Risk Factors (6)
Analyst-vetted known malicious kit (fake Acrobat PDF reader → remote-management agent)
Google Safe Browsing Social Engineering detection
Adobe brand impersonation on an unrelated domain
Artificially gated content requiring a Windows desktop and an 'installer' download
Very new, unranked domain (88 days) with generic 'PDF Viewer' title
4 cross-domain redirects in the request chain
Domain age information unavailable

Details

Page Title

PDF Viewer

Scan Type

public

Domain Name Analysis

You're looking at domain 'prsnrw.de' on the German country-code top-level domain (.de) and has no subdomain. The second-level label 'prsnrw' is 6 characters long containing zero vowels alongside 6 consonants. Word splitting yields two words: prs, nrw. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://prsnrw.de/eftpack/

Page Load Overview

1.06s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:943 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software84% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
84%
documentation technical
72%
corporate business
57%
entertainment media
39%
adult content
37%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4213.136.93.167Lauterbourg, Grand Est, France
AS51167Contabo GmbH
1142.251.155.119Google · CDNUnited States
AS15169Google LLC
1142.250.154.99Google · CDNUnited States
AS15169Google LLC
1142.251.110.147Google · CDNUnited States
AS15169Google LLC
1142.251.20.103Google · CDNUnited States
AS15169Google LLC
1142.251.153.119Google · CDNUnited States
AS15169Google LLC
1142.251.154.119Google · CDNUnited States
AS15169Google LLC
1142.251.156.119Google · CDNUnited States
AS15169Google LLC
1142.251.20.105Google · CDNUnited States
AS15169Google LLC
1142.251.20.106Google · CDNUnited States
AS15169Google LLC
1310--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T186B5B61B8D0F56A07F3828AF4B8BA6497010F79395C39794F0DF4C9DF74AE1A264926C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:fz+EHVWfOTA3zXuT8+o7rjyHlnJXuT8+o7rEXuT8+o7rdy2ln2:S5fbXS8+Q3MlnJXS8+QYXS8+Qxxln2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2294417:FAGyUICQwCBAEAGUBky4BJaExFobSMiEIYkoBQTAqJigAxtMQE9HACQh8QIWqAhKYbQAlQJDKygLRIEoJAFJBCBGqEygMAku

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9c8484849c9c1c1c
Perceptual Hash:9e7709dd4d656700
Difference Hash:313d0d3d3931b9b1
Wavelet Hash:9d9c84949c9c1d1d
Color Hash:3a002038000

Other Hashes

Crop Resistant:4e0d232363573d0a,4ec6c66733573b0a,6667296d6d296900,23334c266e736100,313d0d3d3931b9b1

Scan History

Scan history not available

Unable to load historical scan data