ScanMalware.com

Security Scan Report: prezo.ai

Site favicon
Submitted: Oct 25, 2025, 2:22:29 AMCompleted: Oct 25, 2025, 2:24:22 AMpubliccompleted
Loading additional data...

Summary

This website contacted 30 IPs in 2 countries across 9 domains to perform 135 HTTP transactions. The main domain is prezo.ai and was registered NaN years ago.

Submitted URL: https://prezo.ai/public/new-prezo--0adb545b-a52c-4940-a4ce-ab9614aea6e8

AI Security Verdict

High Risk

Confidence: 92%

10
Risk Score

High‑risk phishing site using brand impersonation and URL manipulation

Risk Factors
Brand impersonation on a low‑reputation domain
URL manipulation (history.pushState/replaceState) to spoof the address bar
Link to a known malicious/suspicious external domain (wixsite.com)
Unranked domain presenting reputable brand names (EE, BT)
Social‑engineering prompt without legitimate context
Domain age information unavailable

Details

Page Title

New Prezo

Scan Type

public

Language

🇺🇸

English

(68% confidence)

Category

suspicious phishing

(41%)

Domain Information

Domain 'prezo.ai' uses the Anguillan country-code top-level domain (.ai) without a subdomain. The registrable portion 'prezo' spans 5 characters split between 2 vowels and three consonants. Word splitting yields two words: prez, o. The median word length lands at 2.5 characters. 'prezo' most strongly signals Galician. You may catch it in Portuguese and Portuguese (Brazil) as well. Net impression: Galician phrase.

Screenshot

Security scan screenshot of https://prezo.ai/public/new-prezo--0adb545b-a52c-4940-a4ce-ab9614aea6e8

Page Load Overview

76.47s
Total Load Time
135
HTTP Requests
9
Domains
811 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:68%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:68%
Script Type:Latin
HTML Lang Attribute:en
Text Length:112 chars
Detector Agreement:100%

Website Classification

Primary Category

suspicious phishing41% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

suspicious phishing
41%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19142.250.185.74United States
AS15169GOOGLE
4172.64.149.246United States
AS13335CLOUDFLARENET
434.120.195.249Kansas City, Missouri, United States
AS396982GOOGLE-CLOUD-PLATFORM
4104.16.79.73United States
AS13335CLOUDFLARENET
4104.26.1.50United States
AS13335CLOUDFLARENET
4104.26.2.158United States
AS13335CLOUDFLARENET
4104.26.0.50United States
AS13335CLOUDFLARENET
4172.67.180.161United States
AS13335CLOUDFLARENET
4172.66.166.164United States
AS13335CLOUDFLARENET
4172.67.73.144United States
AS13335CLOUDFLARENET
13530--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18624E869A75C503F7C23D1F5A6E4AD8C701BB2C2DF371BE9B99210208AD1BF61D62724

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:mwLwJCiadZM2axhz5nEMvX+kfHkGW6Jz0kOtvTGfHDB2k/H24wLwJCiadZM2axhU:9GfHAG04NKWQfZ3l

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:222532:0AaisCRFAJJDJAIBACAAAorTPNKyK4QDFBDOIgxhwgyFQ0eHhOlkGEMGQPIJwAQGisAgCEwwGOEPBGFJkAAChQsEAgBCAAXM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffc3c3e7ff
Perceptual Hash:b18ccf30758bdd30
Difference Hash:80000400960e0c00
Wavelet Hash:42c30303033f263e
Color Hash:#5391ac

Other Hashes

Crop Resistant:80000400960e0c00

Scan History

Scan history not available

Unable to load historical scan data