ScanMalware.com

Security Scan Report: www.narrpr.com

Redirected to:
https://auth.narrpr.com/auth/sign-in?ReturnUrl=%2Fconnect%2Fauthorize%...
Site favicon
Submitted: Jul 7, 2026, 2:16:29 PMCompleted: Jul 7, 2026, 2:18:08 PMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 1 country across 5 domains to perform 141 HTTP transactions. The main domain is auth.narrpr.com and was registered NaN years ago.

Submitted URL: https://www.narrpr.com

Effective URL: https://auth.narrpr.com/auth/sign-in?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dmain_website%26redirect_uri%3Dhttps%253A%252F%252Fwww.narrpr.com%252Fauth%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2520email%2520rpr_contact%2520rpr_current_user%2520rpr_permissions%2520rpr_roles%2520main_api_access%2520web_api_access%2520auth_api_access%26state%3Da824f9f8776944088589035092ac1e65%26code_challenge%3DIvBgJYgHJ5xwukeyhhdyNDRq6TcZGraCYUXSMxXFRMw%26code_challenge_method%3DS256%26response_mode%3DqueryRedirected

The Cisco Umbrella rank of the primary domain is #238,088 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 82%

3
Risk Score

The site impersonates the Realtors Property Resource brand and harvests credentials via a login form, warranting a high‑risk classification.

Risk Factors
Brand impersonation
Credential collection on mismatched domain
Low domain reputation ranking
Highly obfuscated JavaScript
Safety Factors
Domain age > 16 years (well‑established)
No Indicators of Compromise matches
No JavaScript malware YARA detections
No network IDS alerts
Cross‑origin form appears to be a legitimate SSO flow within the same domain
Top-ranked domain (Cisco Umbrella #238,088, 6146 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 8 to 3
Domain age information unavailable

Details

Page Title

Welcome - Realtors Property Resource

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

real estate property

(57%)

Domain Information

The domain 'www.narrpr.com' uses the commercial generic top-level domain (.com) with subdomain 'www'. Count 6 characters in 'narrpr' split between one vowel and 5 consonants. Splitting it apart reveals three words: n, arr, pr. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.narrpr.com

Page Load Overview

4.70s
Total Load Time
141
HTTP Requests
5
Domains
423 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:511 chars
Detector Agreement:100%

Website Classification

Primary Category

real estate property57% confidence
Type: webapp
Method: ml+structural

All Detected Categories

real estate property
57%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2944.196.239.168Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
28162.247.243.29United States
AS54113Fastly, Inc.
2898.89.159.128Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
28162.247.243.39United States
AS54113Fastly, Inc.
28142.251.110.94Google · CDNUnited States
AS15169Google LLC
1415--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T106640981A801B4B12D531BE5920DABD9FB312890B80AE731F5D4C5D6ACCB5E792DB73C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:oKq/vo955HXbXsNJIftU3WKq/vo955HXbXsyura:PJ5HLXsNJIftU31J5HLXsy2a

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:311335:dIocx2TQFUIpCRBiFCRgUBGCJKoMrgAAABmECUkEDGWUiOyLoApFwRKJMBjIIFjAQANJghyggKAVGAqooioEQiIwxADYwKCi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0f0f2f0f0f0f0f0f
Perceptual Hash:93c738389293c7c7
Difference Hash:185bda5ada5a5adb
Wavelet Hash:0f0b2f0f0f0f0f0f
Color Hash:#68ac53

Other Hashes

Crop Resistant:802c3cb0bc9898b6,d2d6b1b2b2e2e2d6,0318185836380936

Scan History

Scan history not available

Unable to load historical scan data