Security Scan Report: salesforce.us-1.evergage.com

Redirected to:
https://salesforce.us-1.evergage.com/ui/login.html
Site favicon
Submitted: Jul 12, 2026, 9:04:31 PMCompleted: Jul 12, 2026, 9:05:41 PMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is salesforce.us-1.evergage.com and was registered NaN years ago.

Submitted URL: https://salesforce.us-1.evergage.com

Effective URL: https://salesforce.us-1.evergage.com/ui/login.htmlRedirected

The Cisco Umbrella rank of the primary domain is #3,207 of the top 1 million websitesTop 10K Site

AI Security Verdict

Low Risk

Confidence: 80%

3
Risk Score

The site mimics Salesforce login on an unrelated domain and collects credentials, indicating a high‑risk phishing attempt.

Risk Factors
Brand impersonation of Salesforce
Credential collection forms on non‑official domain
Safety Factors
Well‑established domain (13+ years)
High Cisco Umbrella ranking (top 10K)
No malicious network or JavaScript signals
Top-ranked domain (Cisco Umbrella #3,207, 4886 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 7 to 3
Domain age information unavailable

Details

Page Title

Login | Salesforce Personalization

Scan Type

public

Language

🇺🇸

English

(47% confidence)

Category

technology software

(51%)

Domain Information

Domain 'salesforce.us-1.evergage.com' uses the commercial generic top-level domain (.com) and includes subdomain 'salesforce.us-1'. The registrable portion 'evergage' spans 8 characters holding 4 vowels versus 4 consonants. Tokenizing the label suggests 2 words: ever, gage. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://salesforce.us-1.evergage.com

Page Load Overview

3.33s
Total Load Time
21
HTTP Requests
2
Domains
544 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:47%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:47%
Script Type:Latin
Text Length:4,024 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software51% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
51%
real estate property
51%
documentation technical
50%
government public service
45%
corporate business
44%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
213.232.186.157Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
211--

Page Statistics

21
Requests
2
Unique Domains
1.3 MB
Total Size

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18003942590F21952018287B436D99B4B3FF1D953C507582836FC2BE82FEFDC399672A6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:Y/7sXVbD8XFyF2X79Y77xEVCj6PDGle+RzRCp:ZXdyUMCoCuq8z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:41298:MTMAAVAmmLyA6eDiBAjZiCZIMbCRECKkHDFiIGCJGIjQuQEJmgJqOCEQAARKDZDUiIGJB4ABBiNkAgIkZDAtINPrUWUQc0FZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fcf0f0f0f0f0f0f0
Perceptual Hash:e6994992bcd2e1e4
Difference Hash:2060c42424a42524
Wavelet Hash:f0f0f0f0f0f0f0f0
Color Hash:#c5878e

Scan History

Scan history not available

Unable to load historical scan data