ScanMalware.com

Security Scan Report: a11503-339593.cluster63.canvas-user-content.com

Redirected to:
https://canvas.instructure.com/login/canvas
Submitted: Apr 3, 2026, 1:20:03 AMCompleted: Apr 3, 2026, 1:20:49 AMpubliccompleted
Loading additional data...

Summary

This website contacted 6 IPs in 1 country across 7 domains to perform 25 HTTP transactions. The main domain is canvas.instructure.com and was registered NaN years ago.

Submitted URL: https://a11503-339593.cluster63.canvas-user-content.com

Effective URL: https://canvas.instructure.com/login/canvasRedirected

The Cisco Umbrella rank of the primary domain is #2,693 of the top 1 million websitesTop 10K Site

AI Security Verdict

Low Risk

Confidence: 78%

3
Risk Score

Page appears to be a legitimate Canvas login redirect; low risk but note the unusual password‑only field.

Risk Factors
Password field without username (potential credential harvesting pattern)
Safety Factors
Well‑established domain (>28 years old)
Final URL matches official Canvas domain
Top‑10k Cisco Umbrella ranking
No malicious Indicators of Compromise
No payment collection fields
Domain age information unavailable

Details

Page Title

Canvas Login | Instructure

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

You're looking at domain 'a11503-339593.cluster63.canvas-user-content.com' on the commercial generic top-level domain (.com), featuring subdomain 'a11503-339593.cluster63'. Its registrable label 'canvas-user-content' stretches across 19 characters holding 6 vowels versus 11 consonants; it also includes 2 hyphens. It segments into three words: canvas, user, content. Expect 6 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://a11503-339593.cluster63.canvas-user-content.com

Page Load Overview

5.08s
Total Load Time
76
HTTP Requests
8
Domains
559 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:26,729 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1618.173.206.75United States
AS16509Amazon.com, Inc.
123.237.140.89Ashburn, Virginia, United States
AS14618Amazon.com, Inc.
1244.198.249.30United States
AS16509Amazon.com, Inc.
12142.251.154.119United States
AS396982Google LLC
1254.231.137.57United StatesUnknown
12142.251.14.94United StatesUnknown
766--

Detected Technologies4

PasswordField
100%
Amazon Web Services
50%
HSTS
40%
Amazon S3
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D5D20A370160897A4DB282D4E9707B1CB9A4D44BE4C0A8C8F7FE061DDBDADE7161726B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:ApzxGdqwx8Fs/s1svwOV/VlKvgUSGr4xGElArPFw09cfNImdzXHUAPpTRaavUUxf:IwArm09iK9yhRUjryXGhOVFPt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30429:nCBEEiCQmBFVuazgYUrMQCa4RSJYVAAUQNBQNBiwiBcaGIQCwIBAAkOaAFoHBATQsBTmE8V8wCiBAKVIIB0zKnBBwUM0iIAM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0818181018180000
Perceptual Hash:cccc3333333366cc
Difference Hash:32b2b23030300800
Wavelet Hash:f8f8f8f83c3c3030
Color Hash:#30862d

Other Hashes

Crop Resistant:a280a2a2a2a280a2,8280a2a2a2a28082,32b2b23030300800

Scan History

Scan history not available

Unable to load historical scan data