ScanMalware.com

Security Scan Report: primofa.biz

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5a0273ec-b858-4221-b613-6a55ac9ae46aDomain and IP registration (RDAP)/api/v1/rdap/5a0273ec-b858-4221-b613-6a55ac9ae46aHow often this domain was scanned/api/v1/domain/stats/primofa.bizScan history for this domain/api/v1/domain/history/primofa.biz?limit=15
This website contacted 4 IPs in 2 countries across 1 domain to perform 1 HTTP transaction. The main domain is primofa.biz and was registered 4 weeks ago.

Submitted URL: https://primofa.biz

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Domain is only 21 days old and flagged as 'remus' malware by two independent threat-intel feeds. The live page is just a registrar parking placeholder with no forms, so it currently presents no harvesting surface, but the domain itself should be avoided.

Risk Factors (3)
Multi-source corroborated malware-family flag on the primary domain
Very new domain (21 days) with no established reputation
Domain resolves to an IP with an unverified single-source abuse-reputation report
Domain age information unavailable

Details

Page Title

Domain registered | Dynadotother network

Scan Type

public

Domain Name Analysis

The domain name 'primofa.biz' uses the business-focused generic top-level domain (.biz) while skipping any subdomain. The second-level label 'primofa' is 7 characters long with 3 vowels and four consonants. Splitting it apart reveals 3 words: prim, of, a. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://primofa.biz

Page Load Overview

75.10s
Total Load Time
N/A
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:473 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning66% confidence
Type: static
Method: ml+structural

All Detected Categories

education learning
66%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1185.53.179.128Germany
AS206834Team Internet AG
0104.21.72.124Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
052.222.236.107Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
052.222.236.87Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
14--

Detected Technologies2

Trustpilot
20%
Bootstrap
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10E73C8E263EA72F0B403E7D8863751667A5324FF7A15CE45B39C5E98AF060CC88D9C85

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:itFudQbhFp1mt/YHmVFYgypdAAfhayCgCdeM2MEoNVXqcqPFvfIcBpiT67FiV:CEGhs+8vypdASRBo/gXpiT67FiV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:74926:CRBNp4WBgCrUuXoEArBEa8kjGAoGwkUhKgWAAoACLhRioLnaCiJFmJBJApmmSoCDAcCAqwlhAAIgMlqKAkFVqhLhSARkS1Ya

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc399950d1f0f1f
Perceptual Hash:bf78e083c78e8c1c
Difference Hash:691e336b6b73fefb
Wavelet Hash:bfc389010d1f0f1f
Color Hash:#97bf40

Other Hashes

Crop Resistant:691e336b6b73fefb

Scan History

Scan history not available

Unable to load historical scan data