Security Scan Report: dillingermuseum.com

Redirected to:
https://newempressmagazine.com/
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 9 HTTP transactions. The main domain is dillingermuseum.com and was registered 18 years ago.

Submitted URL: https://dillingermuseum.com

Effective URL:
https://newempressmagazine.com/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 70%

5
Risk Score

Entry domain dillingermuseum.com carries a multi-source asyncrat malware Indicator of Compromise and cross-domain redirects to an unranked, unreachable host (Cloudflare 522). No forms or page content, but the corroborated malware tag drives HIGH_RISK.

Risk Factors (3)
Multi-source malware-family Indicator of Compromise (asyncrat) attached to the entry domain
Cross-domain redirect from the reported-malicious entry host to a different, unranked domain
Final destination domain has no verifiable reputation and no visible legitimate content
Safety Factors (5)
No forms of any kind (0 password fields, 0 payment fields, 0 total forms) — no credential or payment harvesting observed
No JavaScript malware (YARA) patterns detected
No network IDS alerts and no cross-origin credential exfiltration
No disguised password fields or unicode confusion detected
Established domain (5701 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

newempressmagazine.com | 522: Connection timed out

Scan Type

public

Domain Name Analysis

The domain 'dillingermuseum.com' uses the commercial generic top-level domain (.com) with no subdomain. The second-level label 'dillingermuseum' is 15 characters long with 6 vowels and nine consonants. Word splitting yields two words: dillinger, museum. Average segment length settles at 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dillingermuseum.com

Page Load Overview

22.40s
Total Load Time
17 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:954 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical61% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
61%
technology software
57%
news media journalism
46%
government public service
43%
blog personal website
37%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.19.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.18.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
94--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17CE16271B1F51276006381923695FB6E79E0C217CBBF4598B7DDC2632F9EE82A943290

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:l3Da/D2KUluG4Fh8/G4FUXfu424FP+skKm/jotQmHB+dWSnnRC3/baQxx:lza/CQeEdVyjoWQ+DnnM3Wex

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7004:hCCIgEGiDGAADDQUKAAAARMQEGHBFJGRAYEEULIgBhogGBAiiTzT2hBMVYAYWg2IXrQQQJwhVgFBcAOERgDAAAhoKEAAAQQg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c60000d7f7f3ff
Perceptual Hash:f439e4b49a673164
Difference Hash:1e3e8e8234160606
Wavelet Hash:c70e0000d6c7f3ff
Color Hash:#6c9ae0

Other Hashes

Crop Resistant:1e3e8e8234160606

Scan History

Scan history not available

Unable to load historical scan data