ScanMalware.com

Security Scan Report: img2-azrcdn.newser.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d6300845-232d-4d7d-b456-bd23138a7a86Domain and IP registration (RDAP)/api/v1/rdap/d6300845-232d-4d7d-b456-bd23138a7a86How often this domain was scanned/api/v1/domain/stats/img2-azrcdn.newser.comScan history for this domain/api/v1/domain/history/img2-azrcdn.newser.com?limit=15
This website contacted 17 IPs in 8 countries across 54 domains to perform 237 HTTP transactions. The main domain is newser.com and was registered 24 years ago.

Submitted URL: https://img2-azrcdn.newser.com

The Cisco Umbrella rank of the primary domain is #166,365 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Phishing page on a compromised Newser CDN subdomain; do not submit credentials.

Risk Factors (3)
Hidden password field indicates credential harvesting
Credential collection on an unexpected subdomain (image CDN)
Low domain reputation despite old registration date
Domain age information unavailable

Details

Page Title

Newser | Headline News Summaries, World News, and Breaking News

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'img2-azrcdn.newser.com' is registered and includes subdomain 'img2-azrcdn'. The core label 'newser' covers 6 characters with two vowels and 4 consonants. Word splitting yields 2 words: new, ser. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://img2-azrcdn.newser.com

Page Load Overview

6.58s
Total Load Time
6.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:60%
Script:Latin
Direction:ltr

Detection Details

Text Length:18,077 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical49% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
49%
news media journalism
46%
adult content
39%
technology software
36%
government public service
31%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2935.234.162.151France
AS15169GOOGLE
13146.75.120.157Germany
AS54113FASTLY
1318.245.64.167Ireland
AS60068Datacamp Limited
1313.107.213.44United Kingdom
AS61157PlusServer GmbH
1391.228.74.159Netherlands
AS32934FACEBOOK
133.174.46.96United States
AS54312ROCKETFUEL
13157.240.0.6Finland
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
13142.250.186.130Sweden
AS56396Nexxen Group Ltd
13142.250.185.170Unknown
AS44788Criteo Technology SAS
13104.26.14.96Unknown
AS396982GOOGLE-CLOUD-PLATFORM
23717--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T159D3A200A5E530B7415393B6F96AAB17AB535217D70A5E407AFC4EA62FC3F56CE030AC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Kk5YYQGY+Wc4lxYXSWYHlz/l0VWZsUEb0:LQGWc4lMSflz/l0VWZsUEb0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:136125:TCAAAIIBAkC1IRABkZTiYAhDsAaZMIYnIpJBFpjGvhMWYAvAZQEggrFwGiwNFCE5NYtJgCwIApFBEMAgARSIKgO8gioIxeUQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8387878787878787
Perceptual Hash:be4d4b4b4343415f
Difference Hash:2c363e2e2e162e2e
Wavelet Hash:9387878787878787
Color Hash:#2dd285

Other Hashes

Crop Resistant:2c363e2e2e162e2e,cc8494c49496d6c6,36323636cd8e82a3,030d2c2d2d2d0b0b,1501315151310111,dc392b66769a69e7

Scan History

Scan history not available

Unable to load historical scan data