ScanMalware.com

Security Scan Report: microsoftword.programgridsoft.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c0b24b13-2206-4a68-a128-0b03aa32a034Domain and IP registration (RDAP)/api/v1/rdap/c0b24b13-2206-4a68-a128-0b03aa32a034How often this domain was scanned/api/v1/domain/stats/microsoftword.programgridsoft.comScan history for this domain/api/v1/domain/history/microsoftword.programgridsoft.com?limit=15
This website contacted 4 IPs in 1 country across 3 domains to perform 16 HTTP transactions. The main domain is programgridsoft.com and was registered 8 months ago.

Submitted URL: https://microsoftword.programgridsoft.com/?yclid=13348494483925499903

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Unrelated domain impersonating Microsoft Word to push a pirated 'Volume License' installer .exe from a separate subdomain; phishing threat-intel hit. Do not download or run the file.

Risk Factors (7)
Microsoft brand impersonation on an unrelated third-party domain (programgridsoft.com)
Distribution of an executable ('Word agent launcher.exe') under the guise of official Microsoft software
Offers 'cracked'/Volume-License software 'without Microsoft 365 subscription' — piracy lure commonly used to deliver malware
Single-source phishing threat-intel match on the scanned primary domain
7 cross-domain redirects in the navigation chain
Download host differs from the page host (upcd.programgridsoft.com)
Domain unranked in Cisco Umbrella and only ~219 days old
Domain age information unavailable

Details

Page Title

Microsoft Word

Scan Type

public

Domain Name Analysis

The domain 'microsoftword.programgridsoft.com' uses the commercial generic top-level domain (.com) with subdomain 'microsoftword'. The core label 'programgridsoft' covers 15 characters split between 4 vowels and eleven consonants. Breaking it apart gives three words: program, grid, soft. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

DB word 0630p oyxkunn WaGnows! — CpasHenue @ WORD 2026 — OFFLINE INSTALLER c Microsoft Word. a (Crparernia pasparrns 2026-2028 1 Hema aaa Knaccuyeckas HacTonbHaa Bepcua 2026. Penaktop AOKyMeHT...

Page Load Overview

16.93s
Total Load Time
91 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:2,264 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software57% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
57%
government public service
50%
documentation technical
49%
corporate business
48%
adult content
43%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4185.40.155.13Russia
AS21030Cluster LLC
477.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
487.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
487.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
164--

Detected Technologies2

Nginx
40%
Yandex.Metrika
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16943C8A161E7003AF8129D5C67BA6E1B7655A08BC90AC91476CC13D85FF75EACCA338C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:4jMPzg+iFYFtFTNyFOj89IIIlX8yaSfqeKexlznLRy7:FFiGXlIwj89IIIvaSfqeKexja

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:58895:ArApYAxAoSE5BCxISUxMWZOAoWQDtiCBAMCFQQcFKBHgjyMUaQhZroiABVUIBIEiAADACAK91AVgBsCcgFJANgpQsJKYmLIm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefed1c18191ffff
Perceptual Hash:ecd3916c13d16c96
Difference Hash:e000232b2b2782e0
Wavelet Hash:7efc90808181f37f
Color Hash:N/A

Other Hashes

Crop Resistant:e000232b2b2782e0,8021d6dada25c800

Scan History

Scan history not available

Unable to load historical scan data