technology software

phishing scam

adult content

documentation technical

news media journalism

English

_dd_s

AMP_MKTG_46a3bf0f27

PM-ACCU-TOKEN

sfcid

cf_clearance

_ga_MDRRLSW4FM

AMP_46a3bf0f27

_gid

accu

_cfuvid

clientAccu

__cf_bm

Domain 'wv457.empower-retirement.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'wv457'. The registrable portion 'empower-retirement' spans 18 characters containing 7 vowels alongside ten consonants, notching 1 hyphen. Segmentation suggests two words: empower, retirement. The median word length lands at 8.5 characters. Most frequently, 'empower' shows up in English. You may catch it in Chinese (Pinyin) and French as well.

html/34/2a/342ac564-335c-4d4c-9922-ea4a06e10fa9.html.gz

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:225:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:161:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:129:0

f1a61277e3f902f50ab42015d8b07218db9b7601bb0967e54a52bfdcb4fa7e81

7eca158d61275ccb3a936757810250836dbc2246ee9a1b25e5fae9fb0fd07ae7

0d5ccb38f1d8ac916cbf19b27153c245d50bb48758b150d3c5fd2631af61f2ad

f4ac601291c57ada57cd109468474a0d5d6650bc983c472b401881e0d14dd23c

5743c640722924aa6974b1f602ad1abb67f4c5240cc4829ed64147cf0e6ecf83

3dd568f9b4d5d0eb5e3afd1a54efd40782a753146c776369350122c7b63add24

0bac14b79a68c1c973cb0a9648b80b4dc45c73dc79e36be0c85775c8274e34ff

f59753113647d5a30b45861d573d87f51ba9873006efe77c9cab0f7c9b607997

script-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' https://*.gwrs.com https://*.retirementpartner.com https://*.empower-retirement.com https://*.empower.com https://gp2.newkirkone.com https://*.jpmorgan.com https://*.wistia.net https://*.wistia.com https://*.qualtrics.com https://static.ads-twitter.com https://stats.g.doubleclick.net https://analytics.google.com/ https://www.google-analytics.com/ http://connect.facebook.net http://platform.twitter.com https://connect.facebook.net https://platform.twitter.com https://*.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com *.aws.gwl.com *.facebook.com *.google-analytics.com *.googletagmanager.com *.google.com *.gstatic.com *.amplitude.com fonts.gstatic.com ssl.google-analytics.com https://*.litix.io https://*.akamaihd.net stats.g.doubleclick.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://calculators.everfi.net/ https://cdn.walkme.com https://bugcrowd.com/ https://assets.bugcrowdusercontent.com/ https://challenges.cloudflare.com/; img-src 'self' data: blob: https://*.gwrs.com https://*.retirementpartner.com https://*.empower-retirement.com https://*.empower.com https://*.qualtrics.com https://analytics.google.com/ https://www.google-analytics.com/ https://*.googletagmanager.com https://www.facebook.com https://www.google.com https://*.aws.gwl.com https://*.akamaihd.net https://*.wistia.com stats.g.doubleclick.net https://cdn.cookielaw.org https://calculators.everfi.net/ https://app.optimizely.com https://cdn.optimizely.com https://bugcrowd.com/ https://assets.bugcrowdusercontent.com/ https://d2o9p5vky89u4e.cloudfront.net https://2cd92a770690.o3n.io *.amplitude.com; frame-src 'self' http://*.empower-retirement.com https://empower-retirement.com https://*.gwrs.com https://*.empower.com https://*.retirementpartner.com https://*.empower-retirement.com https://*.jpmorgan.com https://www.fascore.com https://gp2.newkirkone.com https://*.wistia.net https://*.wistia.com https://*.aws.gwl.com https://empowertools.ssnc.cloud https://player.vimeo.com stats.g.doubleclick.net https://td.doubleclick.net/ https://cdn.cookielaw.org https://calculators.everfi.net/ https://a25758810713.cdn.optimizely.com https://a25758810713.cdn-pci.optimizely.com https://bugcrowd.com/ https://assets.bugcrowdusercontent.com/ https://challenges.cloudflare.com/;

description

apple-itunes-app

FwKE1bQFnSwVkBcqgZ4v9k_QVOPcjLkqRCNt6HxDsG4

google-site-verification

format-detection

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

CSC Corporate Domains, Inc.

EMPOWER-RETIREMENT.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon Data Services Northern Virginia

Amazon EC2 Network Operations

AMAZON-IAD

(()=>{var e=(new Date).getTime(),t=(t=window.location.pathname).slice(1).replaceAll("/","-");sessionStorage.setItem(t+"timeZero",e),Math.random()<.1&&((t=document.createElement("script")).async=!0,t.s


            window.pwStyleSheet = {
                path: "/ui/customization-ui/"
            };

            window.accuResolved = false;

            // Create an observable so we can check when th


            if (!/MSIE \d|Trident.*rv:/.test(navigator.userAgent))
                document.write(
                    '<script src="/ui/customization-ui/assets/scripts/login-ui.stylesheet.js" type="


            function setFavicon() {
                var empowerHref =
                    "/ui/customization-ui/customizations/Default/images/magic-login/favicon.png";
                var customHref 


            function loadInvestmentDocuments(pageName, urlPostfix) {
                console.log("loadInvestmentDocuments()");
                console.log(pageName);

                var domain = win


            function injectBugCrowdScript() {
                const observer = new MutationObserver(handleMutations);
                observer.observe(document.body, { childList: true, subtree: true 

(function(){function c(){var b=a.contentDocument||a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'993c7dd6388e2bc5',t:'MTc2MTM0MDU0OC4wMDAwMDA='};

(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=false;j.src

var _A={c:{ua:"UA-56205236-1".replace(/\s*/g,"").split(","),filetypes:new RegExp("(zip|exe|dmg|pdf|doc.*|xls.*|ppt.*|mp3|slxb|pps.*|vsd|vxd|txt|rar|wma|mov|avi|wmv|flv|wav)$","i"),delay:google_tag_man

window.onhashchange=function(a){var b=a.newURL.split("#/")[1],c=a.oldURL.substring(a.oldURL.lastIndexOf("/")+1);a=a.newURL.substring(a.newURL.lastIndexOf("/")+1);"retirementSavings"!=b&&"socialSecurit

_A.versions.NGEventsListener="2.7";
_A.NGEventsListener=function(){var c=function(b,e){function f(a){if(a.c){for(variable in a.c)a.c.hasOwnProperty(variable)&&(a.c[variable.replace("m","metric").repla

var extensionName="User Data",extensionVersion="1.5";_A.NGextensions=_A.NGextensions||[];_A.NGextensions.push(extensionName);_A.NGextension=_A.NGextension||{};
_A.NGextension[extensionName]={category:

var extensionName="All Events",extensionVersion="1.0";_A.NGextensions=_A.NGextensions||[];_A.NGextensions.push(extensionName);_A.NGextension=_A.NGextension||{};_A.NGextension[extensionName]={category:

var extensionName="All Events v2",extensionVersion="2.0";_A.NGextensions=_A.NGextensions||[];_A.NGextensions.push(extensionName);_A.NGextension=_A.NGextension||{};
_A.NGextension[extensionName]={categ

var extensionName="sliderEvents",extensionVersion="2.0";_A.NGextensions=_A.NGextensions||[];_A.NGextensions.push(extensionName);_A.NGextension=_A.NGextension||{};
_A.NGextension[extensionName]={catego

var extensionName="Agg Data",extensionVersion="1.5";_A.NGextensions=_A.NGextensions||[];_A.NGextensions.push(extensionName);_A.NGextension=_A.NGextension||{};
_A.NGextension[extensionName]={category:e

var extensionName="Liat Data",extensionVersion="1.5";_A.NGextensions=_A.NGextensions||[];_A.NGextensions.push(extensionName);_A.NGextension=_A.NGextension||{};
_A.NGextension[extensionName]={category:

var extensionName="Pay Data",extensionVersion="1.5";_A.NGextensions=_A.NGextensions||[];_A.NGextensions.push(extensionName);_A.NGextension=_A.NGextension||{};
_A.NGextension[extensionName]={category:e

var extensionName="Quickview Data",extensionVersion="1.5";_A.NGextensions=_A.NGextensions||[];_A.NGextensions.push(extensionName);_A.NGextension=_A.NGextension||{};
_A.NGextension[extensionName]={cate

_A.u.dbg("log","]ATF CUSTOM PAGELOADS[");_A.versions.customPageloads="1.0";_A.u.dbg("log","]ATF[-- customPageloads: before PRE --]");_A.pageLoads.pre=function(){try{_A.u.dbg("log","]ATF[-- customPagel

_A.customTics=function(a){try{_A.u.dbg("log","]ATF[ ele %O",a),_A.u.dbg("log","]ATF[ href: "+a.href()),_A.versions.customTics="1.1",a.setGA((new RegExp(google_tag_manager["rm"]["821260"](75))).test(_A

if("undefined"!==typeof _A.u.url().url&&"undefined"!==typeof _A.u.url().url){var pUrl=_A.u.url().url,indId=google_tag_manager["rm"]["821260"](95),gaId=google_tag_manager["rm"]["821260"](96),t1000=goog

Script

Google Analytics

Cloudflare Bot Management

Akamai Bot Manager

HSTS

Cloudflare

Google Tag Manager

Amplitude

Google

First-Party Tracking

Datadog Real User Monitoring and Application Performance Monitoring

Datadog

⚠️ High Risk - https://wv457.empower-retirement.com/participant/#/login?accu=WVirginiaWR

Requests	IP Address	Location	AS Autonomous System
5	3.233.158.112	Ashburn, Virginia, United States	AS14618AMAZON-AES
1	142.250.74.206	United States	AS15169GOOGLE
1	13.32.121.75	New York, New York, United States	AS16509AMAZON-02
1	66.102.1.155	United States	AS15169GOOGLE
1	34.120.195.249	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
1	172.64.146.14	United States	AS13335CLOUDFLARENET
1	104.18.95.41	United States	AS13335CLOUDFLARENET
1	18.66.137.5	United States	AS16509AMAZON-02
1	172.64.153.64	United States	AS13335CLOUDFLARENET
1	216.239.32.36	United States	AS15169GOOGLE
66	62	-	-

Security Scan Report: wv457.empower-retirement.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History