Security Scan Report: internal-secure.com

Redirected to:
https://elearning.sosafe.de/
Submitted: Completed: publiccompleted
This website contacted 21 IPs in 2 countries across 9 domains to perform 68 HTTP transactions. The main domain is internal-secure.com and was registered 4 years 1 month ago.

Submitted URL: https://internal-secure.com

Effective URL:
https://elearning.sosafe.de/
Redirected

AI Security Verdict

Low Risk

Confidence: 82%

1
Risk Score

Redirect lands on SoSafe SE's own official domain serving its own e-learning login; no forms, no impersonation, no Indicators of Compromise or malware signals detected.

Safety Factors (5)
Final destination is the vendor's own official domain (sosafe.de) serving its own product login
Self-branding matches the hosting domain — no impersonation of a different entity
No credential or payment form fields present in the captured DOM
No threat-intelligence, JavaScript malware, IDS, or phishing indicators
Legitimate first-party infrastructure references (api/resources/domain-proxy under sosafe.de)
Domain age information unavailable

Details

Page Title

SoSafe E-Learning

Scan Type

public

Domain Name Analysis

The domain name 'internal-secure.com' uses the commercial generic top-level domain (.com) with no subdomain. The second-level label 'internal-secure' is 15 characters long with six vowels and 8 consonants; it also includes one hyphen. It segments into 2 words: internal, secure. Average segment length settles at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://internal-secure.com

Page Load Overview

32.48s
Total Load Time
4.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:649 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software65% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
65%
education learning
53%
documentation technical
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
865.9.130.5Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
318.245.86.72Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
399.84.152.26Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3162.159.135.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
334.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
318.158.192.216Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
318.244.18.114Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
352.29.180.90Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
318.245.86.99Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6821--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FCC37221F1E0503B671B02BB1392F69CA5E8AD03E961869CF23791506ECBEFB3576153

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:xI8bVhFEqkNX0UdhrjAerNFEqkNX0UdNrjAerXgisGLaz9xGxtIWV6vi:xI8DFDkNXdnnASNFDkNXdjnAS+vi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:126143:QoFAiIGIDzqjhkoEBgFlCKUFhoZJMAUKBEABCUzzAACCxiAEm371gaBgNojCgFMgEsVS0TCikVQC0RoDESMkRiGdGJQDyPBq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff9f0f8f0f9fff
Perceptual Hash:bcc3c03cc33907e7
Difference Hash:d020733333333480
Wavelet Hash:7e9f0f09090b0f7c
Color Hash:#bfd279

Scan History

Scan history not available

Unable to load historical scan data