Security Scan: LinkedIn: Log In or Sign Up

Summary

This website contacted 2 IPs in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is linkedin.com and was registered NaN years ago.

Submitted URL: https://email.truenas.com/e3t/Ctc/ZT+113/cNhX604/VWWhFx8Pxx-DW6sBWRM4_pf9YW8tMMP_5QX2glMhPPRz3l5QzW69sMD-6lZ3q3W2QFcRN7rhVVdW7JPFNF8fGQRYW6NY8Bk5zMdqpW7SgJVR2jZJxVW9hK-p936DJyKW4V7SS933mVTRW8H948T8cLJ7PW7V4sQC34MjF0W6NxtG65w19WXW4Qjbn14lKLr1W99MHBK2tVfy3VxzY0q7Rl46WW6DyFnJ725L5HW6TMHs691fmw_W7XcTZh2RBJWCW5NhmXB1Pvj4tW4JYhLT31BvHtW7zVhfl8qh-JgW88SGjm1dsMhCW4kM0ZX3gtNS6f8LrqTx04

Effective URL: https://www.linkedin.com/Redirected

The Cisco Umbrella rank of the primary domain is #105,999 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 92%

Risk Score

The site pretends to be a LinkedIn login page, uses a flagged attacker IP, and shows high‑risk indicators; avoid and report.

Risk Factors

Brand impersonation of LinkedIn on a mismatched domain

Primary domain IoC match (attacker IP)

Low domain reputation ranking

Highly obfuscated JavaScript

Safety Factors

Domain age 8640 days (well‑established)

No password or payment fields detected

No network IDS alerts or credential exfiltration observed

No external form submissions

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 8 to 3

Domain age information unavailable

Details

Page Title

LinkedIn: Log In or Sign Up

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Screenshot

Page Load Overview

1.10s

Total Load Time

HTTP Requests

Domains

24 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:en

Text Length:5,326 chars

Detector Agreement:80%

Website Classification

Primary Category

technology software80% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

80%

education learning

66%

e-commerce shopping

35%

government public service

31%

documentation technical

30%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	199.60.103.225	United States	AS209242Cloudflare London, LLC
2	172.64.146.215	United States	AS13335Cloudflare, Inc.
4	2	-	-

Detected Technologies5

Open-Graph-Protocolvwebsite

100%

Cloudflare Bot Management

55%

HTTP/3

40%

HSTS

40%

Cloudflare

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T149F3A1A162F42A37015BC5F9B925F725DDD2C11BE64EACD2F28D02562FE0D722D0B26C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/Hn33CJSnRjjrlSnJ4IHIQtgaja7aTRwYHlp:vLyWyCeqy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:167919:HAoDIShT4PQZJjBUTJiJgEg4yBgBAlmUHwAbB5IHAAQSgWx0SmBAmYL7IDiZRKiMLOySEgqwBxwQBNJypkDYIkRgqJgUMwGR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fddf99d1f1ff83c1

Perceptual Hash:ecc9939664699b4a

Difference Hash:2b33333727352525

Wavelet Hash:f99989d1f1ff8080

Color Hash:#c587a5

Other Hashes

Crop Resistant:2b33333727352525,09511483317b7668

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: email.truenas.com