Security Scan Report: cityofpomona.com

Redirected to:
http://ww547.cityofpomona.com/?tkn=19vnMT3S
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 4 countries across 7 domains to perform 16 HTTP transactions. The main domain is cityofpomona.com and was registered 25 years ago.

Submitted URL: https://cityofpomona.com/

Effective URL:
http://ww547.cityofpomona.com/?tkn=19vnMT3S
Redirected

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Aged cityofpomona.com now redirects to a randomized subdomain serving a thin keyword link farm and is flagged by Google Safe Browsing for Social Engineering; no forms or malware, but avoid interacting.

Risk Factors (3)
Google Safe Browsing social engineering threat flagged on the primary domain
Redirect to randomized subdomain hosting a keyword link farm (cloaking/monetization pattern)
Page content unrelated to the domain's name and history, indicating possible expired-domain repurposing
Domain age information unavailable

Details

Page Title

cityofpomona.com

Scan Type

public

Domain Name Analysis

The domain 'cityofpomona.com' uses the commercial generic top-level domain (.com). The core label 'cityofpomona' covers 12 characters split between five vowels and 7 consonants. It segments into three words: city, of, pomona. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

E This site can't be reached The webpage at https://cityofpomona.com/ might be temporarily down or it may have moved permanently to a new web address. ERR_SOCKET_NOT_CONNECTED

Page Load Overview

2.30s
Total Load Time
114 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:212 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service91% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
91%
entertainment media
75%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
285.17.5.65Haarlem, North Holland, Netherlands
AS60781LeaseWeb Netherlands B.V.
2172.98.192.101United States
AS31863Centrilogic, Inc.
234.160.121.137Google · CDNKansas City, Missouri, United States
AS396982Google LLC
234.149.1.127Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
287.248.119.251United Kingdom
AS203220Yahoo-UK Limited
263.32.180.52Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
234.243.127.89Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
168--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C1139D6A64F315151923B06C93B3A6066735A003D84BEC68BEDD570CCF88ED689B77EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:5rTqwWev9sMCpoiVRsOQfO60wtTviKe3cvSDlrjtVHoFmRIPFWTvkLHBTx:YwnV1diPsOVw5vWM6DlrJVIFmRoF2vkL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:43415:kBZxDQSBZkIZMEoxJUBAQgBBqQBCAYKjBQUwBCt1GKCPlnQBhhEFAAURuOQsEoGFDAFgQI0xRjANQoIIAMmEFmDAYmgBtJwA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00e7ffdb5a180000
Perceptual Hash:e4e4460e1b1b3bb3
Difference Hash:7096969696b2b294
Wavelet Hash:00ffffffc3181800
Color Hash:N/A

Other Hashes

Crop Resistant:7096969696b2b294

Scan History

Scan history not available

Unable to load historical scan data