Security Scan Report: myprojectdocument.pw

Redirected to:
https://myprojectdocument.pw/download.html
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 4 domains to perform 9 HTTP transactions. The main domain is myprojectdocument.pw and was registered 1 week ago.

Submitted URL: https://myprojectdocument.pw/

Effective URL:
https://myprojectdocument.pw/download.html
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Analyst-vetted fake 'secure document' lure instructing users to run myproject.exe, a remote-management/malware payload; 7-day-old domain with high-precision YARA and IDS corroboration. Avoid and report.

Risk Factors (6)
Known malicious kit identified by name (fake document download delivering remote-management agent)
Directs user to execute myproject.exe — executable payload delivery
Brand-styled 'secured document' pretext with no identifiable publisher or sender
Domain registered 7 days ago and unranked
Page title 'Background Image Page' bears no relation to the domain or the displayed content
Visitor fingerprinting via external IP-lookup service and browser/OS gating consistent with targeted kit delivery
Domain age information unavailable

Details

Page Title

Background Image Page

Scan Type

public

Domain Name Analysis

The domain name 'myprojectdocument.pw' uses the .pw country-code top-level domain with no subdomain. The registrable portion 'myprojectdocument' spans 17 characters with 5 vowels and 12 consonants. Tokenizing the label suggests three words: my, project, document. Average segment length settles at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://myprojectdocument.pw/

Page Load Overview

0.53s
Total Load Time
105 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:318 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical51% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
51%
technology software
49%
education learning
42%
healthcare medical
41%
government public service
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
591.92.41.104Bulgaria
AS211443Sino Worldwide Trading Limited
1142.251.13.95Google · CDNUnited States
AS15169Google LLC
1172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
95--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C561525BA9F3005B390790756BF36B062665C003D20ACA993FBD62E8CF85A9594B73CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nBr+5LMAFtyizQfYn9lPh7TsFWtmtWyN8y7euXDc:nBr0z9zQfk9lFoFWtmtWyneuXDc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3280:AgkAAwBMJEMEAGAAgAAIQABAIQCABABGIBEgAAEAAoFgiBABUuAEgAAgBACAACAEgAkAAAgAAACCAAIAiAiEAgBgAAAJAIIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c3c3c3c0000
Perceptual Hash:9998666799cccc99
Difference Hash:0430b2b2322a3004
Wavelet Hash:04003c3c3c3c0010
Color Hash:#87c59d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data