Security Scan Report: urmigroup.shop

Redirected to:
https://urmigroup.com/
Site favicon
Submitted: Sep 13, 2026, 6:24:20 AMCompleted: Sep 13, 2026, 6:25:23 AMpubliccompleted

This website contacted 16 IPs in 4 countries across 11 domains to perform 196 HTTP transactions. The main domain is urmigroup.com and was registered 23 years ago.

Submitted URL: https://urmigroup.shop/

Effective URL:

https://urmigroup.com/
Redirected

AI Security Verdict

Low Risk

Confidence: 68%

2
Risk Score

Self-branded Urmi Group garments site with only a contact form, no credential/payment capture, and no content-malware, YARA or IDS evidence. Threat-intel hits are generic outbound/single-source. Low risk.

Safety Factors
Self-branding: page title and domain both reference Urmi Group — no impersonation of a different organisation
No credential, password, disguised-password or payment fields anywhere on the page
Cross-origin form submission to urmigroup.com is a legitimate domain-move/SSO flow, not credential exfiltration
No YARA malware, no malicious kit roster match, no IDS alerts, no Safe Browsing hit
Content profile (real corporate sections, factories, clients, sustainability reports, contact addresses) is consistent with a legitimate apparel manufacturer
Domain age information unavailable

Details

Page Title

Urmi Group – Urmi Group

Scan Type

public

Domain Name Analysis

Domain 'urmigroup.shop' uses the commerce-oriented generic top-level domain (.shop) with no subdomain. Its registrable label 'urmigroup' stretches across 9 characters split between 4 vowels and 5 consonants. Breaking it apart gives 3 words: urm, i, group. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://urmigroup.shop/

Page Load Overview

23.07s
Total Load Time
3.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:9,239 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning88% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

education learning
88%
social media network
81%
news media journalism
49%
healthcare medical
45%
corporate business
44%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16142.251.127.97Google · CDNUnited States
AS15169Google LLC
12104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12104.18.0.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12104.21.78.147Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12142.250.154.95Google · CDNUnited States
AS15169Google LLC
122.57.91.91Cyprus
AS47583Hostinger International Limited
12123.49.12.133Dhaka, Dhaka Division, Bangladesh
AS17494Telecom Operator & Internet Service Provider as well
12216.239.34.36Google · CDNUnited States
AS15169Google LLC
12104.18.41.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
19616--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T112F2D875E0B4172D7A1E93BAC1D2B2FCD064D621D607DAE5F0F22024A694AF7047A70E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:jrDZdypa9nd7aE6iO7RwnnNLPflCo7lZw6ZJOYZt:jPypO7aE6Y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:35769:AgSYKhR2AkLyVCEKsBLSHlUCgAiAQ4jMQpgFEAQgtDgXpEkDAEV4jCu9qFEuOMlCRKYIQBABIkGIAVQo6AgENimJEEKlrSmq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data