Security Scan Report: www.salvage.co

Redirected to:
https://www.salvage.co/index.cfm/security
Site favicon
Submitted: May 19, 2026, 4:18:21 AMCompleted: May 19, 2026, 4:20:05 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 1 country across 4 domains to perform 33 HTTP transactions. The main domain is salvage.co and was registered NaN years ago.

Submitted URL: https://www.salvage.co

Effective URL: https://www.salvage.co/index.cfm/securityRedirected

The Cisco Umbrella rank of the primary domain is #592,801 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 80%

7
Risk Score

Critical IDS alert suggests malware activity; treat the site as high‑risk and avoid using it.

Risk Factors
Critical IDS alert indicating possible command‑and‑control traffic
Low domain reputation (ranked >500k) despite long domain age
Credential collection form on a site with no other legitimacy signals
Domain age information unavailable

Details

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

Salvage.co - Salvage.co Login

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

news media journalism

(35%)

Domain Information

The domain 'www.salvage.co' uses the Colombian country-code top-level domain (.co) and includes subdomain 'www'. Count 7 characters in 'salvage' holding three vowels versus four consonants. It segments into 1 word: salvage. Expect seven characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.salvage.co

Page Load Overview

17.23s
Total Load Time
34
HTTP Requests
4
Domains
194 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:70 chars
Detector Agreement:50%

Website Classification

Primary Category

news media journalism35% confidence
Type: webapp
Method: ml+structural

All Detected Categories

news media journalism
35%
cryptocurrency blockchain
30%
phishing/scam
20%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1045.60.13.242United States
AS19551Incapsula Inc
8142.251.14.94United States
AS15169Google LLC
8104.17.25.14United States
AS13335Cloudflare, Inc.
8192.178.183.95United States
AS15169Google LLC
344--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F7C16717AC08CF7F66118484F5B0B66DD0EE951EEB918AC682F6423FB2F4FD88419549

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:o+vPgd8sSSxwV1MzV/EhVDCuatCVY2PdPV5VJLGLxTlJ+HqPTdvLuzaJVCPjPVgo:RHgKTSxwV1MzV/EhVtatCVY2PdPV5VJx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6095:ggUkANCQDMACQaSCVUadigFAAQsMka8ATKJgA6YCQChggAAGDQFAhIAAgqBEgAACIhCGaZIMDgwSSICAAQyABYLIBeoFOhUH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c3c18180000
Perceptual Hash:d9bb260cdcc88d36
Difference Hash:62f032b2b2f2f060
Wavelet Hash:10fcfcfc3c3c3830
Color Hash:#d2a62d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data