ScanMalware.com

Security Scan Report: natscdn.brandworkz.com

Redirected to:
https://brand.nats.aero/BMS/index.cfm
Submitted: Aug 18, 2026, 3:03:30 AMCompleted: Aug 18, 2026, 3:05:04 AMpubliccompleted

Summary

This website contacted 2 IPs in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is brand.nats.aero and was registered NaN years ago.

Submitted URL: https://natscdn.brandworkz.com

Effective URL: https://brand.nats.aero/BMS/index.cfmRedirected

The Cisco Umbrella rank of the primary domain is #139,376 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 80%

3
Risk Score

Site impersonates NATS brand and harvests credentials on a low‑ranked third‑party domain; treat as high‑risk phishing.

Risk Factors
Brand impersonation with credential collection
Low domain ranking for claimed brand
Multiple password fields on a non‑official domain
Safety Factors
No Indicators of Compromise matches
No JavaScript malware YARA detections
No network IDS alerts
Top-ranked domain (Cisco Umbrella #139,376, 8903 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 8 to 3
Domain age information unavailable

Details

Page Title

Brand Centre

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

corporate business

(57%)

Domain Information

Domain 'natscdn.brandworkz.com' uses the commercial generic top-level domain (.com) and includes subdomain 'natscdn'. The core label 'brandworkz' covers 10 characters split between two vowels and eight consonants. Segmentation suggests 3 words: brand, work, z. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://natscdn.brandworkz.com

Page Load Overview

5.05s
Total Load Time
86
HTTP Requests
9
Domains
2.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-GB
Text Length:2,708 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business57% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
57%
government public service
26%
social_media
25%
phishing/scam
20%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
43192.178.183.97Google · CDNUnited States
AS15169Google LLC
4318.66.122.47Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
862--

Page Statistics

86
Requests
9
Unique Domains
3.6 MB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DC338500795C8C3A085709E841ED9A58A1BF9E729456A9E8FDFF42A80FC3BECD777510

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:VZR06MrX+IM/JgFx0fxfSE0VWJVFcxQptqTzSB/raV:VZR066+IM/SqS3VQtqTzSB/G

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:51166:ASRgQ7MZmmCEQqwBSgjCH1gQRaUSnpgIgILKfU4KQAByQSpQAImAUEeAKmEwJCEF6NEAGTNhiCJIgIZAAzTgSM1MA5VAhLsw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c181800ff01
Perceptual Hash:8c5d33762699cccc
Difference Hash:014db3b3352d0d11
Wavelet Hash:00003d3919c3ffff
Color Hash:#2d48d2

Other Hashes

Crop Resistant:8479498980715e8c,014db3b3372d0d11

Scan History

Scan history not available

Unable to load historical scan data