Security Scan Report: photoprintsnow.com

Redirected to:
https://www.photoprintsnow.com/
Submitted: Apr 15, 2026, 7:15:38 AMCompleted: Apr 15, 2026, 7:17:16 AMpubliccompleted
Loading additional data...

Summary

This website contacted 7 IPs in 2 countries across 7 domains to perform 51 HTTP transactions. The main domain is photoprintsnow.com and was registered NaN years ago.

Submitted URL: https://photoprintsnow.com

Effective URL: https://www.photoprintsnow.com/Redirected

The Cisco Umbrella rank of the primary domain is #413,513 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 94%

5
Risk Score

The site impersonates CVS with a login form, uses heavy JS obfuscation, and has a low‑rank domain, indicating a confirmed brand‑impersonation phishing scam.

Risk Factors
Brand impersonation (CVS) on unrelated domain
Credential collection form (email/password)
Low Cisco Umbrella ranking for a claimed major brand
Highly obfuscated JavaScript
Safety Factors
Domain age >9 years (well‑established)
No malicious Indicators of Compromise detected
No YARA malware matches
No network IDS alerts
No cross‑origin credential exfiltration
Established domain (3438 days old) with no strong malicious indicators — risk clamped from 10 to 5
Domain age information unavailable

Details

Page Title

CVS Photo Prints | Photo Gifts and More with Photo Prints Now

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(78%)

Domain Information

The domain name 'photoprintsnow.com' uses the commercial generic top-level domain (.com) with no subdomain. Count 14 characters in 'photoprintsnow' containing 4 vowels alongside 10 consonants. It segments into three words: photo, prints, now. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://photoprintsnow.com

Page Load Overview

4.71s
Total Load Time
67
HTTP Requests
20
Domains
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:2,756 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software78% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
78%
government public service
74%
healthcare medical
72%
social media network
71%
entertainment media
68%

Detected Features

Login Form
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13142.251.110.94Germany
999.84.152.58United States
AS16509Amazon.com, Inc.
9142.251.151.119Germany
918.66.147.10Germany
999.84.152.99United States
AS16509Amazon.com, Inc.
9142.251.13.97United States
AS15169Google LLC
934.160.81.0Kansas City, Missouri, United States
AS396982Google LLC
677--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D0544AA65200A1FE9827CD099B356D24633EE016FC6246D67BFE87748BE7ED0D60BD04

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:KcdRCqqvOCJQ3MhcLOBVH183dY3dK3dRt0OtRSuIC7dSFdNIuZ44Buy0:KcCNK3MhuPEO/t0OauIC7PuPBS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:285430:nBF0hOhkCwkMMyCblJRDRrGUFJcADJRDqoAYEcIgRGAkBRdINI+ABGkQbxAghcABANNIIxYTPCEH6AjBiRcGKGJctqFph4Dg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bd00819191f1ffff
Perceptual Hash:ee4b91860ee96a9a
Difference Hash:694423272767080d
Wavelet Hash:bd00819191e1e7ff
Color Hash:#673a78

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data