Is auth.impacprequal.co.nz a scam?

Our automated security review found no threat indicators on auth.impacprequal.co.nz. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Is auth.impacprequal.co.nz safe to use?

auth.impacprequal.co.nz passed our automated security checks with a trust score of 85/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.

Does auth.impacprequal.co.nz have a valid SSL certificate?

Yes. auth.impacprequal.co.nz presents a valid TLSv1.3 certificate issued by DigiCert Inc · GeoTrust TLS RSA CA G1, expiring in 109 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

Has auth.impacprequal.co.nz been flagged by antivirus engines?

No. All 92 antivirus engines in our malware network report auth.impacprequal.co.nz as clean.

Is auth.impacprequal.co.nz on any phishing or malware blacklists?

No. auth.impacprequal.co.nz is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is auth.impacprequal.co.nz hosted?

auth.impacprequal.co.nz resolves to an IP operated by Incapsula Inc in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the auth.impacprequal.co.nz report updated?

We cache results for 24 hours. Signed-in MalwareTips members can trigger a manual rescan at any time using the "Rescan" button on the report page, which re-runs every check from scratch and refreshes this page.

SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Security Review

Is auth.impacprequal.co.nz legit or a scam?

Name: Is auth.impacprequal.co.nz legit or a scam?
Item: auth.impacprequal.co.nz
Rating: 5
Author: MalwareTips

Our verdict:Safe· 85/100

SafeSuspiciousDangerous

Legitimate IMPAC PREQUAL authentication portal for New Zealand contractor prequalification; registered to active business with clean security profile.

Why we trust it

Registered to active New Zealand business (IMPAC PREQUAL) confirmed via business registration lookup.Zero malware detections across 92 antivirus engines and clean browser blocklists.Hosting IP has zero abuse reports and clean reputation score.

auth.impacprequal.co.nzScanned 1h ago

Post Facebook

Trust score

SAFE

Heuristics 90·MT 82

Category tags

business servicesauthentication portal92% MT confidence

Positive signals (4)

Antivirus clear Not on major blacklists Encrypted connection Clean server reputation

View density

Analysis Summary

Threat Intelligence

0/92

All engines report clean

Domain Age

—

Registration date unknown

MT Intelligence

Safe

Low likelihood · 92% confidence

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Low scam likelihoodengineMT · Guardiantrust82/100

MT AgentLive web researchVisual inspection

Confidence

IMPAC PREQUAL is a recognized health and safety prequalification system used by New Zealand councils, government agencies, and major corporations like Fonterra. The auth subdomain aligns with the official app.impacprequal.co.nz platform for account creation and authentication. Our antivirus network flagged no malicious content, the hosting IP has zero abuse reports, and SSL is valid. Business registration confirms IMPAC PREQUAL as an active New Zealand entity. Web research found no scam reports, complaints, or fraud allegations — only confirmation that the service is a standard industry requirement. The Imperva WAF block in the screenshot is a security measure, not a sign of malicious intent; it simply means the scanner's IP was rate-limited or blocked by the site's own firewall, which is normal for legitimate login portals.

Full dossier

Analysis complete

Page Content

The screenshot shows an Imperva Web Application Firewall (WAF) access-denied block page. This indicates the site's security layer rejected the scanner's IP before any content loaded. This is typical behaviour for authentication portals that restrict access to legitimate users and block automated crawlers.

Infrastructure

Hosting IP 107.154.79.32 has zero abuse reports and a clean reputation score. SSL certificate is valid and issued by DigiCert/GeoTrust, expiring in 109 days. No redirects or homoglyph indicators detected.

Domain History

WHOIS data is unavailable, but business registration confirms IMPAC PREQUAL as an active New Zealand entity. The parent company operates official domains prequal.co.nz and impac.co.nz, with published contact details (0800 773 782, info@prequal.co.nz). The auth subdomain is consistent with a login portal for the legitimate app.impacprequal.co.nz platform.

Web Reputation

Our antivirus network: 0 of 92 engines flagged malicious or suspicious content. Browser blocklists are clean. Web research found zero scam reports, complaints, or fraud allegations. Official IMPAC PREQUAL materials and Google search results confirm the domain as the legitimate authentication endpoint for contractor prequalification and H&S assessments.

Risk Factors

WAF block prevented visual analysis of actual site content; however, this is expected behaviour for a login portal.
WHOIS data unavailable; however, business registration and official materials confirm legitimacy.

Positive Signals

Registered to active New Zealand business (IMPAC PREQUAL) confirmed via business registration lookup.
Zero malware detections across 92 antivirus engines and clean browser blocklists.
Hosting IP has zero abuse reports and clean reputation score.
Valid SSL certificate issued by trusted certificate authority (DigiCert/GeoTrust).
Domain referenced in official IMPAC PREQUAL materials and Google search results as legitimate authentication platform; used by councils, government agencies, and major corporations.

AI Recommendation

This is a safe, legitimate authentication portal. If you are a New Zealand contractor or business required to complete health and safety prequalification, you can use this domain with confidence. If you received a link to this site from an official IMPAC PREQUAL communication or your employer, proceed normally.

Next-gen fraud intelligence

Evidence-backedCross-checked

Website Preview

LIVE RENDER

auth.impacprequal.co.nz

1Page displays an Imperva WAF 'Access denied / Error 16' block page, meaning the renderer's IP was rejected before any site content loaded

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

High visual risk

Visual red flags detected in the screenshot

The screenshot shows only an Imperva security block page; no actual site content was rendered, making visual analysis of the underlying site inconclusive.

Visual risk50/100

What our vision model saw

1 signal

Page displays an Imperva WAF 'Access denied / Error 16' block page, meaning the renderer's IP was rejected before any site content loaded

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for auth.impacprequal.co.nz, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

Active · New Zealand

Site traces back to an actively registered business.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

5 positive

Key findings

6 headline facts from open-web research

impacprequal.co.nz and app.impacprequal.co.nz appear in Google search results for official IMPAC PREQUAL account creation page (https://app.impacprequal.co.nz/create-account).
IMPAC PREQUAL (prequal.co.nz / impac.co.nz) is a well-established New Zealand health & safety contractor prequalification system used by councils, government agencies, Fonterra, and major contractors; multiple companies publicly display the
No scam reports, fraud complaints, negative Reddit threads, or Trustpilot/ScamAdviser mentions found for the domain or IMPAC PREQUAL service.
Official sites promote prequal.co.nz for contractor access and impac.co.nz/prequal for information; the 'auth' subdomain is consistent with a login/authentication portal for the legitimate app.
No WHOIS or registration details surfaced specific red flags; the parent company IMPAC has been operating for years with physical contact numbers (0800 773 782, info@prequal.co.nz).
Third-party support sites (thinksafe.co.nz, prequals.co.nz) openly assist contractors with IMPAC PREQUAL submissions, confirming it as a standard industry requirement in NZ.

Business registration

Status: active · New Zealand

IMPAC PREQUAL is a legitimate health & safety contractor prequalification service operated by IMPAC (impac.co.nz / prequal.co.nz). The subdomain auth.impacprequal.co.nz aligns with their official app domain app.impacprequal.co.nz used for account creation and likely authentication.

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

We searched scam-report databases, consumer-review sites, and general web sources for auth.impacprequal.co.nz and the parent IMPAC PREQUAL service. No scam reports, complaints, or fraud allegations were found. Instead, web research confirmed that IMPAC PREQUAL is a legitimate, well-established New Zealand health and safety contractor prequalification system used by councils, government agencies, Fonterra, and major contractors. The auth subdomain is referenced in official materials as part of the legitimate app.impacprequal.co.nz platform for account creation and authentication. Third-party support sites openly assist contractors with IMPAC PREQUAL submissions, confirming it as a standard industry requirement in New Zealand.

Antivirus Engines

Clean pass · verified

Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious56Harmless92Engines

Clean

Kaspersky

Clean

Bitdefender

Clean

Microsoft

Not in pass

ESET-NOD32

Not in pass

Avira

Not in pass

Sophos

Clean

Fortinet

Clean

Google Safebrowsing

Clean

Emsisoft

Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Sandbox Render

Sandbox capture incomplete — no traffic recorded

Requests made0

Unique IPs0

Countries0

Detected brandsNone

Domain & Encryption

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerDigiCert Inc · GeoTrust TLS RSA CA G1

ExpiresSep 25, 2026 (109d)

Self-signedNo

Hosting & Technology

HostingIncapsula Inc

Server locationUS

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1301http://auth.impacprequal.co.nz/
2403https://auth.impacprequal.co.nz/

Server Reputation

Hosting

CountryUnknown

NetworkUnknown

IP addressUnknown

Abuse Intelligence

Confidence score0%

Reports on file0

ISPIncapsula Inc

Usage typeContent Delivery Network

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

Double-check the exact URL in your address bar
Confirm you are actually on auth.impacprequal.co.nz and not a lookalike like a-uth.impacprequal.co.nz.com or an IDN homoglyph.
Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
Discuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review found no threat indicators on auth.impacprequal.co.nz. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
auth.impacprequal.co.nz passed our automated security checks with a trust score of 85/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
Yes. auth.impacprequal.co.nz presents a valid TLSv1.3 certificate issued by DigiCert Inc · GeoTrust TLS RSA CA G1, expiring in 109 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
No. All 92 antivirus engines in our malware network report auth.impacprequal.co.nz as clean.
No. auth.impacprequal.co.nz is not currently listed on the major browser blocklist feeds that modern browsers use.
auth.impacprequal.co.nz resolves to an IP operated by Incapsula Inc in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
We cache results for 24 hours. Signed-in MalwareTips members can trigger a manual rescan at any time using the "Rescan" button on the report page, which re-runs every check from scratch and refreshes this page.

Final Verdict

Trust / 100

Final Verdict·auth.impacprequal.co.nz

SAFE

This is a legitimate authentication subdomain for IMPAC PREQUAL, a well-established New Zealand health and safety contractor prequalification service. The domain is registered to an active business, has clean security scans, and is referenced in official materials and government/corporate usage.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Safe reports

x-pad365.geomax-positioning.com

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.