ScanMalware.com

Security Scan Report: imperialexpressgroup.com

Submitted: Nov 6, 2025, 8:47:23 AMCompleted: Nov 6, 2025, 8:48:37 AMpubliccompleted
Loading additional data...

Summary

This website contacted 9 IPs in 3 countries across 4 domains to perform 33 HTTP transactions. The main domain is imperialexpressgroup.com and was registered NaN years ago.

Submitted URL: http://imperialexpressgroup.com/

AI Security Verdict

Confirmed Scam

Confidence: 85%

9
Risk Score

Site exhibits circular redirects and is brand new, indicating a high likelihood of phishing scam.

Risk Factors
Circular redirect indicating URL manipulation
Extremely new domain (<7 days) with no established reputation
Unranked domain lacking any known trust signals
Form on a newly created site could be used for credential harvesting
Potential brand impersonation via generic 'Bot Verification' page
Domain age information unavailable

Details

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

Bot Verification

Scan Type

public

Language

🇺🇸

English

(65% confidence)

Category

unknown

(0%)

Domain Information

Domain 'imperialexpressgroup.com' uses the commercial generic top-level domain (.com) and has no subdomain. Count 20 characters in 'imperialexpressgroup' split between eight vowels and twelve consonants. Splitting it apart reveals 3 words: imperial, express, group. Median word length is seven characters. The linguistic tilt is English for 'imperial'. Usage also turns up in Chinese (Pinyin) and Sinhala contexts.

Screenshot

Security scan screenshot of http://imperialexpressgroup.com/

Page Load Overview

13.03s
Total Load Time
33
HTTP Requests
4
Domains
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:65%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:65%
Script Type:Latin
Text Length:54 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3142.250.184.227United States
AS15169GOOGLE
3198.251.88.188Luxembourg, Luxembourg, Luxembourg
AS53667PONYNET
3142.250.186.67United States
AS15169GOOGLE
3142.250.186.163United States
AS15169GOOGLE
32a00:1450:4001:828::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
32a00:1450:4001:829::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
3142.250.184.195United States
AS15169GOOGLE
3216.58.206.35United States
AS15169GOOGLE
32a00:1450:4001:82b::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
339--

Detected Technologies1

X-UA-Compatible
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FFA1C77218B100189C1343A296F2B7466963D203F586D99438ED6760FF8DDF6C453AEC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:vrlklWJxm4UmpK7AxGJIi+KqEgA3dOynZgA66:OlWJQ4UmpK7kGJIKtgUG6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4865:AGoBCggwcQCEiAkkTAAEAGjwQAABtACnCRIgAAEwAYARgIAiBAoIIIBoBAAEChAhCIIyIgQAgYCUAhgEYMIACVEQCAgAAADQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7e7ffffff
Perceptual Hash:a33333cc663399cc
Difference Hash:4d4d4d4d0d000800
Wavelet Hash:e4c0c0e4e4fcf1f0
Color Hash:#401f93

Other Hashes

Crop Resistant:4d4d4d4d0d000800,18a4e49898a4a418,9f373f9d58f0f0e4

Scan History

Scan history not available

Unable to load historical scan data