Security Scan Report: photoprintsnow.com

Redirected to:
https://www.photoprintsnow.com/
Submitted: Apr 15, 2026, 7:15:38 AMCompleted: Apr 15, 2026, 7:17:16 AMpubliccompleted

Summary

This website contacted 7 IPs in 2 countries across 7 domains to perform 51 HTTP transactions. The main domain is photoprintsnow.com and was registered NaN years ago.

Submitted URL: https://photoprintsnow.com

Effective URL: https://www.photoprintsnow.com/Redirected

The Cisco Umbrella rank of the primary domain is #413,513 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 94%

5
Risk Score

The site impersonates CVS with a login form, uses heavy JS obfuscation, and has a low‑rank domain, indicating a confirmed brand‑impersonation phishing scam.

Risk Factors
Brand impersonation (CVS) on unrelated domain
Credential collection form (email/password)
Low Cisco Umbrella ranking for a claimed major brand
Highly obfuscated JavaScript
Safety Factors
Domain age >9 years (well‑established)
No malicious Indicators of Compromise detected
No YARA malware matches
No network IDS alerts
No cross‑origin credential exfiltration
Established domain (3438 days old) with no strong malicious indicators — risk clamped from 10 to 5
Domain age information unavailable

Details

Page Title

CVS Photo Prints | Photo Gifts and More with Photo Prints Now

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(78%)

Domain Information

The domain name 'photoprintsnow.com' uses the commercial generic top-level domain (.com) with no subdomain. Count 14 characters in 'photoprintsnow' containing 4 vowels alongside 10 consonants. It segments into three words: photo, prints, now. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://photoprintsnow.com

Page Load Overview

4.71s
Total Load Time
67
HTTP Requests
20
Domains
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:2,756 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software78% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
78%
government public service
74%
healthcare medical
72%
social media network
71%
entertainment media
68%

Detected Features

Login Form
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13142.251.110.94Germany
AS15169Google LLC
999.84.152.58United States
AS16509Amazon.com, Inc.
9142.251.151.119Germany
AS32934Facebook, Inc.
918.66.147.10Germany
AS8075Microsoft Corporation
999.84.152.99United States
AS16509Amazon.com, Inc.
9142.251.13.97United States
AS15169Google LLC
934.160.81.0Kansas City, Missouri, United States
AS396982Google LLC
677--

Page Statistics

67
Requests
20
Unique Domains
2.3 MB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D0544AA65200A1FE9827CD099B356D24633EE016FC6246D67BFE87748BE7ED0D60BD04

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:KcdRCqqvOCJQ3MhcLOBVH183dY3dK3dRt0OtRSuIC7dSFdNIuZ44Buy0:KcCNK3MhuPEO/t0OauIC7PuPBS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:285430:nBF0hOhkCwkMMyCblJRDRrGUFJcADJRDqoAYEcIgRGAkBRdINI+ABGkQbxAghcABANNIIxYTPCEH6AjBiRcGKGJctqFph4Dg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bd00819191f1ffff
Perceptual Hash:ee4b91860ee96a9a
Difference Hash:694423272767080d
Wavelet Hash:bd00819191e1e7ff
Color Hash:#673a78

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data