ScanMalware.com

Security Scan Report: www.salisbury.nhs.uk

Submitted: Jan 18, 2026, 2:51:10 AMCompleted: Jan 18, 2026, 2:52:26 AMpubliccompleted
Loading additional data...

Summary

This website contacted 10 IPs in 3 countries across 11 domains to perform 71 HTTP transactions. The main domain is salisbury.nhs.uk.

Submitted URL: https://www.salisbury.nhs.uk/

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

Site appears legitimate but unknown domain age warrants moderate caution.

Risk Factors
Domain age unknown – cannot verify how long the site has been registered
Domain is unranked in Cisco Umbrella (not in top 1M) which adds uncertainty
Safety Factors
Uses a government health TLD (.nhs.uk) typically reserved for legitimate NHS trusts
No password, email, or payment fields present
No malicious Indicators of Compromise detected
Domain age information unavailable

Details

Page Title

Salisbury Hospital

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

healthcare medical

(40%)

Domain Information

Domain 'www.salisbury.nhs.uk' uses the United Kingdom country-code top-level domain (.nhs.uk) and includes subdomain 'www'. The core label 'salisbury' covers 9 characters split between three vowels and six consonants. Tokenizing the label suggests 1 word: salisbury. Median word length comes out to 9 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.salisbury.nhs.uk/

Page Load Overview

3.40s
Total Load Time
135
HTTP Requests
18
Domains
9.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:5,352 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical40% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
40%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18142.250.185.142Germany
AS35425
13213.175.216.100United Kingdom
AS35425Iomart Managed Services Limited
13172.66.163.83United States
AS13335CLOUDFLARENET
13172.64.153.109United States
AS13335CLOUDFLARENET
1313.226.247.18United States
AS16509AMAZON-02
13212.102.56.178Frankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
13172.217.20.131United States
AS15169GOOGLE
13142.250.186.170United States
AS15169GOOGLE
13142.250.185.106United States
AS15169GOOGLE
13184.24.77.9UnknownUnknown
13510--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14723303124E6586280A380D5AB753F2B7BE4E713D90A4986F5AD8FD44FC6C8ECD73609

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:EBfsUcnN44ZP1njyl354CgBKnOLyK3/1vUwNMyaS5ecvn273xH:n245c35iBKOLd3/1v1Mytx273t

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:48107:ArjgECA8SAQAUYs9CAWCRMMAJaAAlCOyLYQBo4iABiA0oKQ0IEKEQoAJGIaAfgULSIBwWPAoBAVhQaHEeMAIgOKWYBQKBIGG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ff090198f8fff3
Perceptual Hash:eb12e5527f335a40
Difference Hash:2372591931d1c3c3
Wavelet Hash:00ff0d019868fff3
Color Hash:#8790c5

Other Hashes

Crop Resistant:2372591931d1c3c3,010124ccdcd42941,9a652656cc16a280

Scan History

Scan history not available

Unable to load historical scan data