ScanMalware.com

Security Scan Report: webagent-pop6-1.intermedia.net

Redirected to:
https://login.intermedia.net/user/Account/Login?ReturnUrl=%2Fuser%2Fco...
Site favicon
Submitted: Sep 14, 2026, 6:22:42 PMCompleted: Sep 14, 2026, 6:23:22 PMpubliccompleted

Summary

This website contacted 9 IPs in 1 country across 8 domains to perform 2 HTTP transactions. The main domain is login.intermedia.net and was registered 21 years ago.

Submitted URL: https://webagent-pop6-1.intermedia.net

Effective URL: https://login.intermedia.net/user/Account/Login?ReturnUrl=%2Fuser%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dwebagent.intermedia.net%26response_type%3Dcode%26redirect_uri%3Dhttps%253A%252F%252Fwebagent-pop6-1.intermedia.net%252Fauth%252Fsts%26scope%3Dopenid%2520offline_access%26state%3D79a9a82e-721d-4c47-9078-56bfa55ab98e%26culture%3Den-USRedirected

The Cisco Umbrella rank of the primary domain is #69,421 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

1
Risk Score

Official Intermedia SSO login: webagent-pop6-1.intermedia.net redirects to login.intermedia.net for OAuth authentication. Established 31-year-old domain, no threat intel, malware, or IDS hits. Legitimate.

Safety Factors
31-year-old established domain with strong Umbrella ranking
Authentication and scanned resource share the same organizational domain (no brand mismatch)
Standard OAuth/OIDC SSO redirect to the provider's own login page
No threat-intel, malware, or network IDS matches
Anti-automation (reCAPTCHA) and CSRF protections present, typical of real account systems
Domain age information unavailable

Details

Page Title

Contact Center Agent

Scan Type

public

Language

🇺🇸

English

(55% confidence)

Category

healthcare medical

(36%)

Domain Information

You're looking at domain 'webagent-pop6-1.intermedia.net' on the network infrastructure generic top-level domain (.net), featuring subdomain 'webagent-pop6-1'. The second-level label 'intermedia' is 10 characters long with five vowels and 5 consonants. Word splitting yields one word: intermedia. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://webagent-pop6-1.intermedia.net

Page Load Overview

2.90s
Total Load Time
29
HTTP Requests
8
Domains
874 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:55%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:55%
Script Type:Latin
Text Length:351 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical36% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

healthcare medical
36%
technology software
32%
government public service
30%
documentation technical
28%
social media
15%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5104.18.39.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.154.119Google · CDNUnited States
AS15169Google LLC
3150.171.109.194Azure · CLOUDUnited States
AS8075Microsoft Corporation
3142.251.155.119Google · CDNUnited States
AS15169Google LLC
3142.250.154.94Google · CDNUnited States
AS15169Google LLC
3172.64.148.29Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.151.119Google · CDNUnited States
AS15169Google LLC
3192.178.183.94Google · CDNUnited States
AS15169Google LLC
3142.251.14.113Google · CDNUnited States
AS15169Google LLC
299--

Page Statistics

29
Requests
7
Unique Domains
2.4 MB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1172187521CE6C58700510EDABCB1F10E1D46EA8FD294EC4839DE12BA1F85BCC8C0B92C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hRYRnv2BKRkqZslaNPb3DLM03iCg6dSpLzHgpLlgdSiQOogiadSaj:TQZ7NLXdWLgLlgdNQOead3j

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1221:BAAAAAAAAIAAAAAAAAAAFAAAAAAAAAQQAggAABAAAEEAFAAIAAAAABAAAAEABAAJCAACAAAAEAgAAAAAAAAAAAAAACEAACAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818000000
Perceptual Hash:c9993366cc993366
Difference Hash:100c32b2b2300800
Wavelet Hash:0f0f1f1f1f1f0303
Color Hash:#5377ac

Other Hashes

Crop Resistant:a2bab6b682b233a2,100c32b2b2300800

Scan History

Scan history not available

Unable to load historical scan data