ScanMalware.com

Security Scan Report: usatoday.42web.io

Redirected to:
https://usatoday.42web.io/?i=1
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0e74542a-bec1-47ad-88bb-4d1839842291Domain and IP registration (RDAP)/api/v1/rdap/0e74542a-bec1-47ad-88bb-4d1839842291How often this domain was scanned/api/v1/domain/stats/usatoday.42web.ioScan history for this domain/api/v1/domain/history/usatoday.42web.io?limit=15
This website contacted 4 IPs in 2 countries across 3 domains to perform 39 HTTP transactions. The main domain is 42web.io and was registered 6 years ago.

Submitted URL: https://usatoday.42web.io/

Effective URL:
https://usatoday.42web.io/?i=1
Redirected

The Cisco Umbrella rank of the primary domain is #513,260 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 60%

6
Risk Score

Free-hosted site using the USA Today name with scraped news headlines and spam-template filler; no credential or payment forms, but the brand use and low-quality content warrant caution.

Risk Factors (2)
Uses the well-known USA Today news brand name on a non-official free-hosted subdomain, which can mislead visitors into believing it is the legitimate publisher
Aggregated/duplicated news content with lorem-ipsum filler and garbled snippets, characteristic of low-quality spam/template sites
Safety Factors (4)
No credential, login or payment form on the page
No JavaScript malware (YARA) or high-precision kit-roster hits
No cross-origin credential submission or credential exfiltration detected
Base hosting domain 42web.io is well-established (registration 2020) and analytics traffic is to standard Google services
Domain age information unavailable

Details

Page Title

usatoday - news website interested in political news and events all around the world and all the news in united states and international news and articles and we interested about sports news like football and all other sports

Scan Type

public

Domain Name Analysis

Domain 'usatoday.42web.io' uses the British Indian Ocean Territory country-code top-level domain (.io) with subdomain 'usatoday'. Count 5 characters in '42web' holding 1 vowel versus two consonants, notching 2 digits. Tokenizing the label suggests 2 words: 42, web. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://usatoday.42web.io/

Page Load Overview

3.16s
Total Load Time
546 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,151 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
50%
news/blog
40%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12185.27.134.176United Kingdom
AS34119Wildcard UK Limited
9192.178.183.97Google · CDNUnited States
AS15169Google LLC
9216.239.34.36Google · CDNUnited States
AS15169Google LLC
9216.239.32.36Google · CDNUnited States
AS15169Google LLC
394--

Detected Technologies9

WordPressv6.9
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
Google-AnalyticsvUniversal
100%
PHP
50%
MySQL
50%
Google Analytics
35%
WordPress Block Editor
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C0930A72A09C05BA7E8F97EDC110331DB29AE906CE5A46D1B2FDE22C93B4DF2506711D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:lcVyp5q0YpxEkdO5bgRsYhJBdPsMZYO5GuMhPwJi3Y2Gi5XO1S7s:lcQDq0YpENXP7s

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:96854:V1JWWEEDcGOCAQABCYBBsZ2w5EhIMQgjgIjJQDYhyKOBkBNhUQCEGEKAAcBgIQALgJSAhzKAR76EqLSCBNoFTIsADngQg0Ib

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffff8783c3ffff
Perceptual Hash:b619c9663e1b6649
Difference Hash:81002a2e2f0e4a72
Wavelet Hash:00ff87838383a3fb
Color Hash:#77862d

Other Hashes

Crop Resistant:81002a2e2f0e4a72,0101249696240101,f9f0f0f0f0716d55,476b5b53b4b51e8d

Scan History

Scan history not available

Unable to load historical scan data