This address isn’t a regular website – it’s a server likely used by the mobile game CSR Racing 2. You’d only land here if the game or an update directs your device to it. The problem is that we can’t see who controls this server. The parent domain (nmgx.co.uk) has no visible owner in public records, and this subdomain popped up with no history. Most official game servers run under well-known company domains with transparent registration. If the game you’re playing sends traffic here, check the developer’s official support page to confirm it’s legitimate. If you see this URL in a browser or an unsolicited link, treat it as suspicious. It returns a strange HTTP 240 code, which might mean it’s not meant for web access at all. No malware has been detected, but the lack of accountability makes it hard to trust for anything beyond anonymous game data.
Not sure — double-check csr2-production2-core.core.nmgx.co.uk first
In plain English
This server looks like a backend for a mobile game, but we can’t confirm who runs it. The lack of public ownership and a very recent appearance are reasons to be cautious. There are no malware flags, but the odd HTTP response code suggests this isn’t a typical website.
Where the score comes from
Valid certificate and modern TLS are good, but the server still accepts old, deprecated TLS versions. That's a minor vulnerability for a game server, not a dealbreaker.
We can’t see who owns this server because it’s a subdomain of an unverified parent. For an API endpoint that’s not unusual, but it means there’s no clear accountability.
No blacklist hits or virus flags, but the server is brand new with zero history in the Wayback Machine. Neutral: it’s not known as malicious, but there’s no track record to lean on.
This is a backend server, not a consumer website, so missing contact info and an about page is completely normal and expected.
Legal pages aren’t needed for a server that doesn’t collect personal data through a web interface. The absence is fine.
Hosted on Amazon AWS, which is solid, but the server returns a strange HTTP 240 status and lacks basic security headers. That’s sloppy for a production machine.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →