ScanMalware.com

Security Scan Report: www.mrtb.gov.ng

Submitted: Sep 15, 2026, 9:47:46 PMCompleted: Sep 15, 2026, 9:48:41 PMpubliccompleted

Summary

This website contacted 7 IPs in 2 countries across 6 domains to perform 2 HTTP transactions. The main domain is mrtb.gov.ng and was registered 29 years ago.

Submitted URL: https://www.mrtb.gov.ng/apps/attvpn.vip

AI Security Verdict

High Risk

Confidence: 60%

7
Risk Score

Single-source, unverified threat-intel flag on a URL path (apps/attvpn.vip) under an 18-year-old Nigerian government domain; page itself is a benign 404 with no phishing or forms, but the flagged staging path warrants caution.

Risk Factors
Single-source unverified threat-intel indicator flagged as malware/staging on the primary domain
Attacker-style path (apps/attvpn.vip) hosted on the government domain
Domain age information unavailable

Details

Page Title

Medical Rehabilitation Therapists (Registration) Board of Nigeria - Seite nicht gefunden

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government

(48%)

Domain Information

You're looking at domain 'www.mrtb.gov.ng' on the Nigerian country-code top-level domain (.gov.ng) and includes subdomain 'www'. Its registrable label 'mrtb' stretches across 4 characters holding zero vowels versus 4 consonants. Word splitting yields 2 words: mrt, b. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.mrtb.gov.ng/apps/attvpn.vip

Page Load Overview

5.37s
Total Load Time
22
HTTP Requests
6
Domains
327 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:2,917 chars
Detector Agreement:75%

Website Classification

Primary Category

government48% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government
48%
government public service
46%
healthcare medical
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.250.146.102United States
AS53850GorillaServers, Inc.
3142.250.154.95Google · CDNUnited States
AS15169Google LLC
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
3142.251.13.95Google · CDNUnited States
AS15169Google LLC
3157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
3157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
227--

Page Statistics

22
Requests
6
Unique Domains
354.1 KB
Total Size

Detected Technologies4

MetaGenerator
100%
JQueryv3.6.4
100%
HSTS
40%
Google Hosted Libraries
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12B21127318A8481E23109252E8C1F035EC669537AB085990F0CA15FECFF0BC781D3A1D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hVkHCrYCowJti5IgRoN/KN/lLZa5Ii7t8d3NVG:bNr4IAoNSN/a5IiIO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1123:EMABAgAAAIgAAAAAAAAAAAAAAgEAAAAIAAAAIAABAAFAgAIDAIABAAAAAAQCQAAAAAwAAACAACCAAwQAgAAQAQIAAAAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffdf00
Perceptual Hash:9e9463bc63bc4316
Difference Hash:17b0f822282423d1
Wavelet Hash:001c1cff9f9f9f00
Color Hash:#5f783a

Other Hashes

Crop Resistant:17b0f822282423d1,010339cccccc1301,4022d0d0d2ccdcd4

Scan History

Scan history not available

Unable to load historical scan data