Security Scan Report: nortonchildrens.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 24 IPs in 1 country across 14 domains to perform 136 HTTP transactions. The main domain is nortonchildrens.com and was registered 10 years ago.

Submitted URL: https://nortonchildrens.com/services/pediatrics/measles/

AI Security Verdict

Safe Website

Confidence: 93%

0
Risk Score

Legitimate Norton Children's medical article on measles in children. Ten-year-old domain, self-branded, no credentials/payment collected, no threat-intel, YARA or IDS hits. Newsletter form posts to Salesforce Marketing Cloud.

Safety Factors (5)
Domain established ~10 years (2015 registration), well-established risk category
Self-branding matches domain — no brand impersonation
No credential or payment form; only an e-mail newsletter signup
Threat intelligence, JavaScript YARA, kit roster and network IDS all returned no matches
Physical address visible; recognized healthcare provider content
Domain age information unavailable

Details

Page Title

Measles Rash in Children | Norton Children’s

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'nortonchildrens.com' is registered with no subdomain. The registrable portion 'nortonchildrens' spans 15 characters split between four vowels and eleven consonants. Tokenizing the label suggests 2 words: norton, childrens. Average segment length settles at 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nortonchildrens.com/services/pediatrics/measles/

Page Load Overview

7.44s
Total Load Time
4.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:22,408 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical81% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
81%
finance banking
57%
corporate
35%
news/blog
20%

Detected Features

OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21141.193.213.20Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
5104.16.222.185Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.127.95Google · CDNUnited States
AS15169Google LLC
5172.64.147.188Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.156.119Google · CDNUnited States
AS15169Google LLC
5172.66.133.186Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
520.121.104.90Azure · CLOUDDulles, Virginia, United States
AS8075Microsoft Corporation
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5142.251.13.94Google · CDNUnited States
AS15169Google LLC
5104.17.3.95Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13624--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T145644B73E800207F691F42D56568B718F56B910EEB0149EAF5FE519863C6FF920AB38C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:ZPfqZPuaLbRg0DZEuiBKe9xyPTYa49tQYzFWfoUXad5y+BnLitbWK6:ZGm39

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:334853:hMiCkNkoLlk6mAoMLzAMqCARIAEQgVABTQoECqkgENNQCZjDY9giaAMEgK5SaJaBEEgwsosiBPhVBSGjUJyyNDIVCB+gmBBp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:faf0f0f1f1ffffff
Perceptual Hash:cd4592926aaa976d
Difference Hash:9472f2a3231c9392
Wavelet Hash:70103070f0cf5fdf
Color Hash:#931f23

Scan History

Scan history not available

Unable to load historical scan data