Security Scan Report: www.wmas.nhs.uk

Site favicon
Submitted: Jan 15, 2026, 6:44:29 PMCompleted: Jan 15, 2026, 6:45:37 PMpubliccompleted
Loading additional data...

Summary

This website contacted 10 IPs in 2 countries across 11 domains to perform 1 HTTP transaction. The main domain is wmas.nhs.uk.

Submitted URL: https://www.wmas.nhs.uk/

AI Security Verdict

Moderate Risk

Confidence: 75%

5
Risk Score

Site shows brand impersonation on an unknown‑age, unranked domain; avoid providing credentials.

Risk Factors
Brand impersonation / typosquatting on a non‑official domain
Safety Factors
No credential or payment forms present
No malicious Indicators of Compromise matches found
No external links to suspicious domains
Domain age information unavailable

Details

Page Title

West Midlands Ambulance Service University NHS Foundation Trust

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

The domain name 'www.wmas.nhs.uk' uses the United Kingdom country-code top-level domain (.nhs.uk) with subdomain 'www'. The second-level label 'wmas' is 4 characters long holding 1 vowel versus 3 consonants. Word splitting yields two words: wm, as. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.wmas.nhs.uk/

Page Load Overview

2.53s
Total Load Time
76
HTTP Requests
13
Domains
2.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-GB
Text Length:7,975 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13142.250.185.106United States
AS15169GOOGLE
7142.250.185.99United States
AS15169GOOGLE
7142.250.185.136United States
AS15169GOOGLE
7142.250.185.196United States
AS15169GOOGLE
7104.20.44.120United States
AS13335CLOUDFLARENET
7146.75.122.132Frankfurt am Main, Hesse, Germany
AS54113FASTLY
7142.250.185.174United States
AS15169GOOGLE
7142.250.184.195GermanyUnknown
7141.193.213.20United States
AS209242Cloudflare London, LLC
788.221.60.244Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
7610--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13593F77264D5A43B028B84C9A533A71AAAE18307C61648C5F9FD47E90FDFD5ACE7320D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:nW+QydM31n30JGTRkrOTvkdHizaQk+kWJt7Rij:nW+QydMFnqGTRmOTv6HizaQk+kWr7O

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:89566:gIoMXChJlRBIgAHoGhCgABZMrSQUIQEpNAlUoIcAGkgXgyIv0Eg5AdSEb4oS5NBNpEIomwgHRQcUErgQgiYhkEgH0jhgQgEs

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff8fffffff8181
Perceptual Hash:bed16dd24d309139
Difference Hash:7a3f1b3321082f23
Wavelet Hash:8b8787bf9d878181
Color Hash:#bf404d

Scan History

Scan history not available

Unable to load historical scan data