Security Scan Report: huzur.de

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is huzur.de and was registered 3 months ago.

Submitted URL: https://huzur.de/profinishplumbing/download.html

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Adobe 'secured document' download page on a 92-day-old domain, confirmed by an analyst-vetted hunting rule kit signature, that installs a remote-management agent. Do not download or open the file.

Risk Factors (5)
Known malicious Adobe-impersonating RMM lure kit identified by analyst-vetted roster and hunting rule
Brand impersonation of Adobe on a non-Adobe domain with no disclosure
Kit is designed to install a remote-management agent (ScreenConnect/FleetDeck/GoTo Resolve) enabling full remote control
Deceptive filename lure targeting a plumbing business ('Profinish_Plumbing_Adobe.pdf')
Unranked domain with no established reputation hosting the lure in a subfolder
Domain age information unavailable

Details

Page Title

Background Image Page

Scan Type

public

Domain Name Analysis

The domain 'huzur.de' uses the German country-code top-level domain (.de) and has no subdomain. The second-level label 'huzur' is 5 characters long with two vowels and 3 consonants. Segmentation suggests two words: hu, zur. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Adobe _Creativity& Design v PDF & E-signatures v Marketing & Commerce v Leam & Support v Q Search Adobe | @ 8 Home 8, Shared with you Ey & Projects {B Libraries & brands. 8 @ Review links .| mom u...

Page Load Overview

0.34s
Total Load Time
73 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:333 chars
Detector Agreement:90%

All Detected Languages

🇺🇸en(83%)🇷🇴ro(17%)

Website Classification

Primary Category

documentation technical54% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
54%
technology software
40%
healthcare medical
37%
government public service
35%
news media journalism
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4193.34.145.201Lauterbourg, Grand Est, France
AS51167Contabo GmbH
41--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12761615BA9F3005B390790716BF36B0A2675C003D20ACA593FBD62E8CF85A9584B73CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nBr+5LMAFtyizQfYn9lPh7TsFWtOXtWyN8y7euXDc:nBr0z9zQfk9lFoFWtOXtWyneuXDc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3295:BAgAAgBOJEMEBGAAgAAAQABAIEAABABuIREgQAFAwoFAiBABAmIEAAAgAAiAACAEiCEQAAhQAAiAAAAAjAiEAghgAAIJAKIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00001c3c3c3c0000
Perceptual Hash:9c1c6363ed9c9c98
Difference Hash:c4b23232b2aab084
Wavelet Hash:00063e3e7e7e427e
Color Hash:07200000007

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data