Security Scan Report: nxslink.thehill.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 50 IPs in 3 countries across 29 domains to perform 71 HTTP transactions. The main domain is thehill.com and was registered 31 years ago.

Submitted URL: https://nxslink.thehill.com/join/signup

The Cisco Umbrella rank of the primary domain is #33,794 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

Legitimate newsletter signup page on The Hill's own nxslink.thehill.com subdomain. Email-only subscription form, established 31-year-old domain, no credential/payment fields and no threat-intel hits.

Safety Factors (5)
Established domain over 31 years old with strong reputation ranking
Self-branding consistent with the domain (thehill.com subdomain)
Only an email newsletter signup form; no credential or payment collection
Business legitimacy indicators present: physical address, legal terms, privacy policy, cookie consent
No threat-intel, YARA, IDS, or malicious JavaScript signals
Domain age information unavailable

Details

Page Title

The Hill Signup

Scan Type

public

Domain Name Analysis

You're looking at domain 'nxslink.thehill.com' on the commercial generic top-level domain (.com), featuring subdomain 'nxslink'. Count 7 characters in 'thehill' containing two vowels alongside 5 consonants. Segmentation suggests 2 words: the, hill. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nxslink.thehill.com/join/signup

Page Load Overview

3.60s
Total Load Time
2.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:55%
Script:Latin
Direction:ltr

Detection Details

Text Length:6,407 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism42% confidence
Type: spa
Method: ml+structural

All Detected Categories

news media journalism
42%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
223.222.82.214Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
118.66.147.53Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1146.75.122.137Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
1151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.18.86.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1151.101.1.91Fastly · CDNUnited States
AS54113Fastly, Inc.
165.9.130.51Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1142.251.156.119Google · CDNUnited States
AS15169Google LLC
152.87.12.232Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
7150--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13E04605B39A1631AEAD38719AA927EC53520985FFD338CECF14D93784BCC7E24C21649

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:ImxxDKtkSR5Ynp4aqic5ZiZ3Bd5jAwHzz9JAY/z3Tn/uG/We18+ceM:BWq2ZSzx1Or

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:188373:F7gaAEQCGcA5DAmBOUiLIAokVhIEhUpzAYIBiZFnmgA0AaQUEkC4RjgJJVDBJIJgNHqHSIcB0i4gNgCgBCPAI5oQYHG0FmEF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8383ffcfc7c7c7c7
Perceptual Hash:b03c3c3cc3c3c7c3
Difference Hash:36b6001a1c1c1c1c
Wavelet Hash:c2c2c6cec7c3c3c6
Color Hash:#b7bf40

Other Hashes

Crop Resistant:36b6001a1c1c1c1c

Scan History

Scan history not available

Unable to load historical scan data