Security Scan Report: gweus.browser.cloud.com

Redirected to:
https://gweus.browser.cloud.com/logon/LogonPoint/index.html
Site favicon
Submitted: Jun 21, 2026, 7:58:53 AMCompleted: Jun 21, 2026, 8:00:07 AMpubliccompleted

This website contacted 1 IP in 1 country across 1 domain to perform 26 HTTP transactions. The main domain is gweus.browser.cloud.com and was registered 25 years ago.

Submitted URL: https://gweus.browser.cloud.com

Effective URL:

https://gweus.browser.cloud.com/logon/LogonPoint/index.html
Redirected

The Cisco Umbrella rank of the primary domain is #2,153 of the top 1 million websitesTop 10K Site

AI Security Verdict

Low Risk

Confidence: 85%

3
Risk Score

The page harvests Citrix credentials on an unrelated, long‑standing domain, indicating a credential phishing attempt.

Risk Factors (3)
Credential collection on a domain not owned by the branded entity
Impersonation of Citrix brand
Obfuscated JavaScript (high‑entropy, excessive concatenation)
Safety Factors (4)
Domain is well‑established (over 25 years old)
No Indicators of Compromise matches
No malicious YARA patterns or IDS alerts
Top-ranked domain (Cisco Umbrella #2,153, 9338 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 8 to 3
Domain age information unavailable

Details

Page Title

Citrix Gateway

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'gweus.browser.cloud.com' is registered; it also runs on subdomain 'gweus.browser'. The core label 'cloud' covers 5 characters split between two vowels and three consonants. It segments into 1 word: cloud. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://gweus.browser.cloud.com

Page Load Overview

5.86s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:4,358 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software79% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
79%
download file sharing
69%
documentation technical
59%
government public service
47%
social_media
25%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2640.87.65.190Washington, Virginia, United States
AS8075Microsoft Corporation
261--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18343B561A0F6253701D385CAB462AB1B7FE2D64BDA07960076FC46D64FE7E8ACD03129

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:F2tWer3oStC+rFIY8Kiz6JmMvjcT0Kgtu2lX7afxfWJb0f7lHokf8xKbPie1A0:QthTb7NJNvjcIKau2lX7fifPfAe1A0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:60087:CCKAAGjoOEIpAZwhVe5AVqAJ+QMESAGLhCk5AsYkaACAJ0eSRJRCgGEWIGEESwAgYRRXwEkABDFAQBFSkNCEWpEcQyhcByQI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00f8381c1cffebe0
Perceptual Hash:d94e66b919b32646
Difference Hash:006060f3f22a1a82
Wavelet Hash:00f8383c1cffebe0
Color Hash:#ac5372

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data