Security Scan Report: testwebsite.on.nimp.org

Redirected to:
http://ww547.nimp.org/?tkn=19vnMT3S
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 4 countries across 7 domains to perform 16 HTTP transactions. The main domain is nimp.org and was registered 8 years ago.

Submitted URL: http://testwebsite.on.nimp.org

Effective URL:
http://ww547.nimp.org/?tkn=19vnMT3S
Redirected

AI Security Verdict

Moderate Risk

Confidence: 75%

5
Risk Score

Domain is flagged as malware by two unverified single-source reports; the page is a low-quality doorway redirect with unrelated commercial links. No forms or malware scripts were observed.

Risk Factors (3)
Content-malware threat-intel reports on the primary domain nimp.org, though single-source and unverified.
Tokenized redirect from a subdomain to another subdomain, consistent with cloaking or tracking redirects.
Low-quality doorway content with unrelated high-value commercial keywords and no coherent legitimate brand.
Safety Factors (5)
Domain is established, registered in 2018.
No credential or payment forms detected.
No JavaScript malware patterns, network IDS alerts, or credential exfiltration detected.
No cross-origin form submissions detected.
Established domain (3118 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

nimp.org

Scan Type

public

Domain Name Analysis

You're looking at domain 'testwebsite.on.nimp.org' on the non-profit oriented generic top-level domain (.org) with subdomain 'testwebsite.on'. The registrable portion 'nimp' spans 4 characters containing one vowel alongside three consonants. Tokenizing the label suggests two words: n, imp. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://testwebsite.on.nimp.org

Page Load Overview

2.86s
Total Load Time
113 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:175 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media88% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
88%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
234.160.121.137Google · CDNKansas City, Missouri, United States
AS396982Google LLC
245.82.67.240Naaldwijk, South Holland, Netherlands
AS49981WorldStream B.V.
234.149.1.127Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
287.248.119.252United Kingdom
AS203220Yahoo-UK Limited
263.32.180.52Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
234.243.127.89Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
168--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AB138D5598F311152433B06853FB66027B36D0139857ED68BD9CD328CF85DAA89B3BDC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:crfqwW3x9rdldIh6i9qG+dH8wUBq0rFhzOqkg8Hr74FWTv9TN:Vwgx9pIh6wqG+hkkKrzHmL74F2vpN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:42599:EYJFFCQQBQRQQ6iRGKRBKInhxQ6AtYkpAMxtFHRCAUDCwQEI0SpQMlStAALpAwgAtIHTIggiILsEyzgAIA4YoIhQMzFqh0US

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00e7ffdb5a180000
Perceptual Hash:b4a5430e4f1a3bba
Difference Hash:71969696b2b29684
Wavelet Hash:00ffffffdb180000
Color Hash:#d22d9b

Other Hashes

Crop Resistant:71969696b2b29684

Scan History

Scan history not available

Unable to load historical scan data