Security Scan Report: my.vanguardplan.com

Redirected to: https://my.vanguardplan.com/login/participant

Site favicon
Submitted: Feb 2, 2026, 9:46:14 PMCompleted: Feb 2, 2026, 9:48:04 PMpubliccompleted
Loading additional data...

Summary

This website contacted 7 IPs in 2 countries across 8 domains to perform 29 HTTP transactions. The main domain is my.vanguardplan.com and was registered NaN years ago.

Submitted URL: https://my.vanguardplan.com

Effective URL: https://my.vanguardplan.com/login/participantRedirected

The Cisco Umbrella rank of the primary domain is #136,041 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Phishing login page impersonating Vanguard; do not enter credentials.

Risk Factors
Brand impersonation of Vanguard on a non‑official domain
Credential harvesting form (username/password fields)
Low Cisco Umbrella ranking for a site claiming a well‑known brand
Domain age information unavailable

Details

Page Title

Vanguard - Participant Login

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government public service

(46%)

Domain Information

You're looking at domain 'my.vanguardplan.com' on the commercial generic top-level domain (.com) and includes subdomain 'my'. Count 12 characters in 'vanguardplan' containing 4 vowels alongside eight consonants. Tokenizing the label suggests 2 words: vanguard, plan. Expect 6 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://my.vanguardplan.com

Page Load Overview

21.65s
Total Load Time
21
HTTP Requests
8
Domains
406 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:227 chars
Detector Agreement:50%

Website Classification

Primary Category

government public service46% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
46%
news media journalism
27%
technology software
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3205.166.36.19United States
AS12152Ascensus, LLC.
3141.193.122.13United States
AS12152Ascensus, LLC.
313.33.158.137Germany
3216.58.206.72United States
AS15169Google LLC
3162.247.243.39United States
AS54113Fastly, Inc.
32.19.126.225GermanyUnknown
3184.24.77.152GermanyUnknown
217--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17B736C94B1E174752BEB6AA1F0BBC701B2275223354AC8E0716DC9E11BD5CEC6237E39

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:0e8y9o4dW9hesZl2yX66P/p0OReFoqAiw0MpJOo39fO8rRkdqxwSuWx2z1phy:0A9o4g9hoyX6o/p0OReDwbpP39fO8rRt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:75527:2iEAjkAagOCCTVU6j0ZALwAb4mQMgITBCDAw5gyokDzQBWAGICgKMpwkgmYSIgqgOBSqDBQBMNRjABThMAjABZijVjaVhFwQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:18241800241800ff
Perceptual Hash:931be44ee6199933
Difference Hash:3028322a2832080c
Wavelet Hash:1b1b1b1b0018e7ff
Color Hash:#56d22d

Other Hashes

Crop Resistant:3028322a2832080c

Scan History

Scan history not available

Unable to load historical scan data