ScanMalware.com

Security Scan Report: www.epsom-ewell.gov.uk

Submitted: Nov 20, 2025, 11:13:59 AMCompleted: Nov 20, 2025, 11:15:29 AMpubliccompleted
Loading additional data...

Summary

This website contacted 9 IPs in 2 countries across 4 domains to perform 54 HTTP transactions. The main domain is epsom-ewell.gov.uk and was registered NaN years ago.

Submitted URL: https://www.epsom-ewell.gov.uk/

AI Security Verdict

High Risk

Confidence: 88%

7
Risk Score

High‑risk phishing site impersonating Google on an unrelated government domain.

Risk Factors
Brand impersonation / typosquatting on a non‑official domain
Unranked domain presenting a well‑known brand
Domain age information unavailable

Details

Page Title

Epsom and Ewell Borough Council |

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government public service

(52%)

Domain Information

Domain 'www.epsom-ewell.gov.uk' uses the United Kingdom country-code top-level domain (.gov.uk) and includes subdomain 'www'. The registrable portion 'epsom-ewell' spans 11 characters with 4 vowels and 6 consonants, notching one hyphen. It segments into two words: epsom, ewell. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.epsom-ewell.gov.uk/

Page Load Overview

0.49s
Total Load Time
54
HTTP Requests
4
Domains
2.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:10,714 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service52% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
52%
government
48%
healthcare medical
40%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5123.185.0.2United States
AS54113FASTLY
62a00:1450:4001:82b::200aFrankfurt am Main, Hesse, Germany
AS15169GOOGLE
62a00:1450:4001:82f::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
62620:12a:8001::2United States
AS54113FASTLY
62620:12a:8000::2United States
AS54113FASTLY
62a00:1450:4001:82a::2008Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
1142.250.181.234United States
AS15169GOOGLE
1142.250.186.131United States
AS15169GOOGLE
1142.250.184.232United States
AS15169GOOGLE
549--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12314A5829232B9AF285951D6BAB1A61E50B391C9F3160D50EDFC2C32A744D361F633DF

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:OuXT7Ffwgt/Jd8Lfa7xddIlJbyJZuu9CY1efPz8d0TpvfvV8AWAmwYkUP4yAWHRB:Uy7xddI3u9CYUfPz8d0TFfvV8/zRWgBj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:195592:pAtKgYIBDCZDFKCYIiRCgoMANSMIwQAgEkqikAsAApSQgALzUhkxQgNDATERcwDYAAJgbC4hUcwXxAIFCxjEjijEMcRJgAVH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00c3dbdbe3e3ffc3
Perceptual Hash:ed181a475d966593
Difference Hash:86232a320a060603
Wavelet Hash:00c3c3c3e3e3ff81
Color Hash:#9479d2

Other Hashes

Crop Resistant:86232a320a060603,82a616d281d29890,0147a0044808a008,c9acb49091f2eecd,0018a4a4e4e484a4

Scan History

Scan history not available

Unable to load historical scan data