Security Scan: Background Image Page

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5657299f-726c-4b0c-a56f-ba05b2c4bb54 Domain and IP registration (RDAP)/api/v1/rdap/5657299f-726c-4b0c-a56f-ba05b2c4bb54How often this domain was scanned/api/v1/domain/stats/mwreese.de Scan history for this domain/api/v1/domain/history/mwreese.de?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is mwreese.de and was registered 3 months ago.

Submitted URL: https://www.mwreese.de/madridsteam/download.html

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Confirmed phishing/malware lure: a fake Adobe 'secured document' page on mwreese.de running an analyst-vetted kit that pushes a remote-management agent. Backed by hunting rule, 5 Safe Browsing hits and multi-feed phishing intel. Do not download.

Risk Factors (6)

Fake Adobe-branded document sharing interface on a domain unrelated to Adobe

Known phishing kit that installs a remote-management agent (ScreenConnect, FleetDeck, GoTo Resolve) on the victim's Windows device

Multiple independent Safe Browsing social-engineering detections

Multi-feed phishing threat-intelligence corroboration against the hosting domain

Recently registered domain (93 days) with no Cisco Umbrella reputation, used as a lure host

Lure targets specific visitors (kit reportedly screens out Edge, Mac and mobile users) - anti-analysis behavior

Domain age information unavailable

Details

Page Title

Background Image Page

Scan Type

public

Domain Name Analysis

Domain 'www.mwreese.de' uses the German country-code top-level domain (.de) and includes subdomain 'www'. The second-level label 'mwreese' is 7 characters long containing 3 vowels alongside four consonants. Splitting it apart reveals 2 words: mw, reese. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Adobe _Creativity& Design v PDF & E-signatures v Marketing & Commerce v Leam & Support v Q Search Adobe | @ 8 Home 8, Shared with you Ey & Projects {B Libraries & brands. 8 @ Review links .| mom u...

Page Load Overview

0.32s

Total Load Time

73 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:320 chars

Detector Agreement:90%

All Detected Languages

🇺🇸en(81%)🇷🇴ro(19%)

Website Classification

Primary Category

technology software49% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

49%

download file sharing

43%

documentation technical

37%

healthcare medical

34%

news media journalism

33%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	213.136.93.167	Lauterbourg, Grand Est, France	AS51167Contabo GmbH
4	1	-	-

Detected Technologies1

Apache HTTP Server

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15B61525BA9F3045B390790716BF36B062665C003D20ACA593FBD62E8CF8599594B73CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nBr+5LMAFtyizQfYn9lPh7TsFWtGPtWyN8y7euXDc:nBr0z9zQfk9lFoFWtAtWyneuXDc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3282:AAgAAgBMJEMEAGAIgAABRATAIAAEBAjGIDEgAAEAAoFAiBABAmAEAAhgAgKAACAEkAEAAAgAAAKAAAAQiAiEAgBgkAAJAIIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00001c3c3c3c0000

Perceptual Hash:9c1c6363ed9c9c98

Difference Hash:c4b23232b2aab084

Wavelet Hash:00063e3e7e7e427e

Color Hash:07200000007

Other Hashes

Crop Resistant:8c888e96aea89696,c4b23232b2aab084

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: www.mwreese.de