ScanMalware.com

Security Scan Report: www.nhetravel.com

Site favicon
Submitted: Jan 19, 2026, 12:52:16 PMCompleted: Jan 19, 2026, 12:53:36 PMpubliccompleted
Loading additional data...

Summary

This website contacted 7 IPs in 1 country across 7 domains to perform 33 HTTP transactions. The main domain is nhetravel.com and was registered NaN years ago.

Submitted URL: https://www.nhetravel.com/2026/01/19/spain-transport-incident-level-3-train-derailment-in-adamuz-cordoba-brazil/

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

Legitimate informational page with no security concerns.

Safety Factors
Well‑established domain (>17 years old)
No malicious Indicators of Compromise
No password, email, or payment fields in forms
Informational content about a transport incident
Domain hosted on standard web hosting (not IPFS or cloud storage)
Domain age information unavailable

Details

Page Title

Spain, Transport Incident, Level 3: Train derailment in Adamuz – Córdoba, Brazil – NHE Travel by Nan Hwa (Express) Travel Service Limited

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

news media journalism

(41%)

Domain Information

Within the commercial generic top-level domain (.com), 'www.nhetravel.com' is registered; it also runs on subdomain 'www'. Its registrable label 'nhetravel' stretches across 9 characters containing 3 vowels alongside 6 consonants. It segments into 3 words: n, he, travel. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.nhetravel.com/2026/01/19/spain-transport-incident-level-3-train-derailment-in-adamuz-cordoba-brazil/

Page Load Overview

6.19s
Total Load Time
59
HTTP Requests
8
Domains
25.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:7,706 chars
Detector Agreement:50%

Website Classification

Primary Category

news media journalism41% confidence
Type: spa
Method: ml+structural

All Detected Categories

news media journalism
41%
news/blog
20%
news
15%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11104.21.82.190United States
AS13335CLOUDFLARENET
8172.66.171.172United States
AS13335CLOUDFLARENET
8172.217.20.142United States
AS15169GOOGLE
8142.250.185.138United States
AS15169GOOGLE
8142.251.141.131United States
AS15169GOOGLE
8104.16.80.73United StatesUnknown
8142.251.140.163United States
AS15169GOOGLE
597--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T189A3B92170468C7A5EABD6EAD1767626A0BA5B02CF1204D8F3FC93B45F8DD7D8633409

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:DXVDmM8Hk+VypLa99on30LZrpkE8OWbn9KjrW9U3b0IK70X:DXVDF1hn974b470X

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:104945:EMGIIlAAgsQkheioAAGaAASAsBYVJIK8wDJIiJAAIK4NhQAeAh6wbJ4YQPTyAUBgJF8FNSDWogEqAE2gAAwoS4plcaVALAEA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0101078f0100ffff
Perceptual Hash:ba2acc1af931c687
Difference Hash:bf67cf1b79ed1e00
Wavelet Hash:010327cf0504ffff
Color Hash:#bf5940

Other Hashes

Crop Resistant:bf67cf1b79ed1e00,bfb7e7cf1b79ed3c

Scan History

Scan history not available

Unable to load historical scan data