Security Scan Report: microsoftword.programgridsoft.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 15 HTTP transactions. The main domain is programgridsoft.com and was registered 8 months ago.

Submitted URL: https://microsoftword.programgridsoft.com/?yclid=8425516442148929535

AI Security Verdict

Confirmed Scam

Confidence: 85%

9
Risk Score

Fake Microsoft Word 2026 'offline installer' on a non-Microsoft domain, pushing an executable from a separate subdomain. Brand impersonation plus pirated-software lure and a phishing threat-intel report: do not download.

Risk Factors (5)
Brand impersonation of Microsoft on an unrelated domain (microsoftword.programgridsoft.com, registered under programgridsoft.com)
Direct download of a Windows executable from a separate subdomain with no publisher verification
Displayed SHA-256 hash appears fabricated as a trust signal
Six cross-domain redirects in the navigation chain
Phishing threat-intel report on the primary domain (single-source, unverified)
Domain age information unavailable

Details

Page Title

Microsoft Word

Scan Type

public

Domain Name Analysis

Domain 'microsoftword.programgridsoft.com' uses the commercial generic top-level domain (.com) with subdomain 'microsoftword'. The second-level label 'programgridsoft' is 15 characters long split between four vowels and eleven consonants. Splitting it apart reveals three words: program, grid, soft. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

DB word 0630p oyxkunn WaGnows! — CpasHenue * WORD 2026 — OFFLINE INSTALLER c Microsoft Word. a (Crparernia pasparrns 2026-2028 1 Hema aaa Knaccuyeckas HacTonbHaa Bepcua 2026. Penaktop AOKyMeHT...

Page Load Overview

3.35s
Total Load Time
91 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:2,264 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software57% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
57%
government public service
50%
documentation technical
49%
corporate business
48%
adult content
43%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6185.40.155.18Russia
AS21030Cluster LLC
377.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
387.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
387.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
154--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16943C8A161E7003AF8129D5C67BA6E1B7655A08BC90AC91476CC13D85FF75EACCA338C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:4jMPzg+iFYFtFTNyFOj89IIIlX8yaSfqeKexlznLRy7:FFiGXlIwj89IIIvaSfqeKexja

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:58895:ArApYAxAoSE5BCxISUxMWZOAoWQDtiCBAMCFQQcFKBHgjyMUaQhZroiABVUIBIEiAADACAK91AVgBsCcgFJANgpQsJKYmLIm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefed1c18191ffff
Perceptual Hash:ecd3916c13d16c96
Difference Hash:e000232b2b2782e0
Wavelet Hash:7efc90808181f37f
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data