Security Scan Report: newschicago.org

Submitted: Completed: publiccompleted
This website contacted 13 IPs in 5 countries across 8 domains to perform 42 HTTP transactions. The main domain is newschicago.org and was registered 7 years ago.

Submitted URL: https://newschicago.org/m/index.html

AI Security Verdict

High Risk

Confidence: 74%

7
Risk Score

Unrelated 'newschicago.org' host passes itself off as the official imToken wallet download site, including an 'official download' claim. Clear brand impersonation with a download lure; do not install anything from it.

Risk Factors (3)
Impersonation of the imToken crypto-wallet brand on an unrelated, unranked domain.
Deceptive pairing of a Chicago-news-sounding hostname with financial/crypto download content.
Undisclosed use of another company's brand identity for a downloadable wallet application — a classic channel for fake-wallet / drainer distribution.
Domain age information unavailable

Details

Page Title

imToken钱包-imtoken安卓版冷钱包下载中文版

Scan Type

public

Domain Name Analysis

Domain 'newschicago.org' uses the non-profit oriented generic top-level domain (.org) without a subdomain. The core label 'newschicago' covers 11 characters holding four vowels versus seven consonants. Word splitting yields 2 words: news, chicago. Average segment length settles at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://newschicago.org/m/index.html

Page Load Overview

11.39s
Total Load Time
940 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:2,187 chars
Detector Agreement:75%

Website Classification

Primary Category

cryptocurrency blockchain82% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
82%
finance banking
69%
corporate business
65%
technology software
64%
adult content
47%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6107.175.178.100Dallas, Texas, United States
AS36352HostPapa
38.212.139.141Manila, Metro Manila, Philippines
AS45102Alibaba (US) Technology Co., Ltd.
33.160.156.7Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
339.156.66.111China
AS9808China Mobile Communications Group Co., Ltd.
343.169.95.124Singapore
336.248.16.48Xiamen, Fujian, China
AS4837CHINA UNICOM China169 Backbone
3103.235.46.96Hong Kong
AS55967Beijing Baidu Netcom Science and Technology Co., Ltd.
33.160.156.192Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3125.74.108.43China
AS141998China Telecom
3117.187.133.33China
AS138407The Internet Data Center of Guizhou Mobile Communication Company Limited
4213--

Detected Technologies5

JQueryv1.11.1
100%
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T120A2FF71E8FB9A670592C8E056794F0A5FD24A8FDD26570973FCC2D66F9AD4CAC03208

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:P35rjejhMxSYxxSYoxSYxxSYO2/PP3KKgRjNekIUKDepEiyzeKn6etH98QD2p5kI:P39jejKxSYxxSYoxSYxxSYO2/PgPKDet

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:22478:bBBBQCpmO00wghACUMtADxQDVopDIAEBlhOAASWCw6aUIlsAIBEkSIYiM0bddADqoJbOYgwEUsgAgIBUjTebYDAhQKCWgBwo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffff000000
Perceptual Hash:bcfd03929218e1ed
Difference Hash:38121235344371d5
Wavelet Hash:dffbc3dfdf000000
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data