ScanMalware.com

Security Scan Report: cnusd.instructure.com

Redirected to:
https://login.microsoftonline.com/02bca8e6-4916-4829-be8c-74b66ae10a24...
Submitted: Apr 4, 2026, 3:30:50 PMCompleted: Apr 4, 2026, 3:32:05 PMpubliccompleted
Loading additional data...

Summary

This website contacted 12 IPs in 3 countries across 12 domains to perform 53 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://cnusd.instructure.com

Effective URL: https://login.microsoftonline.com/02bca8e6-4916-4829-be8c-74b66ae10a24/saml2?SAMLRequest=fZLLTsMwEEX3fEXkvfNwk9BabaXSClGJR9QWFmyQ40yppcQuHpvH3%2BOmIMoCJMsLe%2B6cO9ceo%2BjaPZ95t9MrePGALnrvWo28v5gQbzU3AhVyLTpA7iRfz26uOYtTvrfGGWlaciL5XyEQwTplNImWiwl5klKUQzZilA1yoHld5nTIRE2b0aBgxbZpilSQ6AEsBs2EhBZBiOhhqdEJ7cJRykqa5mFtsoIPUl6UjyRahDmUFq5X7ZzbI0%2BS1jwrHXdKWoNm64xulYZYmi5JWS3FEEqaj7KwBUe0hqGk58FRKSBLBcuTw3SMRLPvEeZGo%2B%2FArsG%2BKgn3q%2BsflNQem1gFk9ZL5%2B0R0xvo%2B5Co%2BsruQulG6ef%2FY6uPRcivNpuKVnfrDZmOD314H4adHrh%2FYnvj4%2BS0fnx89ttAWi4q0yr5EV0a2wn3t5EszvoT1dBtX8q9xj1ItVXQhFza1rzNLQgHExL4QJLpEfr7e03PPgE%3D&RelayState=saml_idp_prxy%3ASAMLRequest%3DnVNdj9owEPwrkd%252FJFyUcFiBRUFUk2uaA9qEv1Z7jHJb8kXptyv37OgGOqCpXqZEfIu94ZnfGniIo2dCFdwe95T89RxedlNRIu8KMeKupARRINSiO1DG6W3za0DxOaWONM8xIEi0QuXXC6KXR6BW3O26PgvGv282MHJxrkCaJgCqW5lnoWGh01jPnLY%252BZUQmopO3gejhR3MFCCsAEZHOAhIE%252BAg6C3unlR6Bp%252FyoSrUK3QkOre1NBNPEZLxV27G2%252FebJplUn0wVjGu3FnpAaJnETr1YxgnhUPD6wocij4eDgepRNWFeN0VIyf8gomkI75cFhXdRbwWAKiOPIbA6Ln6zAUaDcjeZoXg%252FRdWPtsRIcpHY2%252Bk6i8mPVe6Ero57edfTqDkH7c78tB%252BWW3J9E3brGbNADIfNrmQzth20vsbVq4xkTmLawXA%252B1bTK8WT5OeylmyoZ8D7XpVGinYS7SQ0vxaWg7u5kawWIG730kWZ92OqAZ1B6VeY8OZqAUPqe7KVuHRg2w37Jnnn62S5Nrf5Rrzqks53CnHT%252B4%252FLIqWRjVgBbaeK6GF8urqe596KcOZLa%252FvWEohYEP4R1FxSyfZMEtfvzwtKNMeqz9fxMX4v8qca3fmfK32X%252FT8Nw%253D%253D&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=KecOYtsAAXuwxqOsW%2BGED1775d3QYvIiSvNhkrgVnDhkEQi9nc0F78ApAn7%2FPHV0FMyzcclMVfqB5pxk1jWtwjIAu3%2BXHBUBTBKZXQ6RSOE6CCD0s6qjU6tBsM6VhZydo0igeLIR95Zc221GgsnylfjOCEF9XGPYJy48eCvohW2tep8A955n7UrDa6xYXaTQwsQP5DEr%2BamjfBuJGShRlfgAEEaXN2j%2BYcLnvVsOJ%2BEQceHUgURgU5ElrzL4lhrqAZd6K%2BlDyNQ7K7k5EIf%2Fm1GkKWeJ1lWlOPD38kF46uN%2BxUL5B1%2B8q887WyAtRRLpiKppAt2j%2BatNn18vOhIAEg%3D%3D&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #994 of the top 1 million websitesTop 1K Site

AI Security Verdict

Low Risk

Confidence: 92%

2
Risk Score

Legitimate SSO login page; no phishing or malware indicators detected.

Risk Factors
Cross‑origin credential form submitting email and password to login.microsoftonline.com
Multiple redirects (7) observed before reaching the final login page
Safety Factors
Well‑established domain age (>10 years)
High Cisco Umbrella ranking (top 1 K)
HTTPS connection
No malicious Indicators of Compromise
No YARA JavaScript malware detections
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government public service

(30%)

Domain Information

You're looking at domain 'cnusd.instructure.com' on the commercial generic top-level domain (.com), featuring subdomain 'cnusd'. The registrable portion 'instructure' spans 11 characters split between 4 vowels and 7 consonants. Breaking it apart gives two words: in, structure. Median word length is 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cnusd.instructure.com

Page Load Overview

2.05s
Total Load Time
48
HTTP Requests
11
Domains
588 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:373 chars
Detector Agreement:67%

Website Classification

Primary Category

government public service30% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

government public service
30%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
413.107.246.44Netherlands
AS14618
440.126.32.74Amsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
416.15.223.183Germany
AS20940
423.207.210.132Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
418.173.205.22United States
AS16509Amazon.com, Inc.
420.190.159.130UnknownUnknown
413.107.246.45United States
AS8075Microsoft Corporation
498.88.87.127UnknownUnknown
420.190.160.22UnknownUnknown
499.83.186.201UnknownUnknown
4812--

Detected Technologies5

X-UA-Compatible
100%
PasswordField
100%
Meta-Refresh-Redirect
100%
HSTS
40%
Ghost
15%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T177935AE97EB31837868645B9F0BA7D039A766903984CCD60F1ACCC842FFA75D9123607

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:ju8GLG2JomYKnF48OVoIyEk77gx2xpTvPoMmCB7E9THqilC:S8Wo0m8OVJ32RAPC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:91413:AThUBJDiE3gTPEEYrICEBhwARPJKAlOIPSAxBCGlQDaAIjZxgBL7K4AoAABkIJYAACymDoblLwPgqKgoz0b0LDgBsDgBWQ04

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00383b3727277f7f
Perceptual Hash:8759d83366cc513b
Difference Hash:88f2d2e7cfcee6e6
Wavelet Hash:00382b3727273f3f
Color Hash:#d279be

Other Hashes

Crop Resistant:88f2d2e7cfcee6e6

Scan History

Scan history not available

Unable to load historical scan data