ScanMalware.com

Security Scan Report: delnorte.is.cloud.invgate.net

Redirected to:
https://delnorte.is.cloud.invgate.net/#/login?returnUrl=%2F
Site favicon
Submitted: May 18, 2026, 7:58:16 PMCompleted: May 18, 2026, 8:00:03 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 1 country across 3 domains to perform 10 HTTP transactions. The main domain is delnorte.is.cloud.invgate.net and was registered NaN years ago.

Submitted URL: https://delnorte.is.cloud.invgate.net

Effective URL: https://delnorte.is.cloud.invgate.net/#/login?returnUrl=%2FRedirected

The Cisco Umbrella rank of the primary domain is #26,545 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 78%

6
Risk Score

Suspicious login page with credential‑only password field and heavily obfuscated JavaScript; proceed cautiously and avoid entering credentials.

Risk Factors
Credential‑only password field
Heavy JavaScript obfuscation (charcode manipulation, base64, unescape)
Login page on subdomain that does not match typical public login URL
Safety Factors
Domain age 20+ years, well‑established registration
Domain is a subdomain of invgate.net (brand‑related infrastructure)
No malicious Indicators of Compromise or IDS alerts
No external form submissions or credential exfiltration observed
Domain age information unavailable

Details

Page Title

InvGate Asset Management

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

cryptocurrency blockchain

(41%)

Domain Information

Domain 'delnorte.is.cloud.invgate.net' uses the network infrastructure generic top-level domain (.net) with subdomain 'delnorte.is.cloud'. Its registrable label 'invgate' stretches across 7 characters with three vowels and 4 consonants. Breaking it apart gives 3 words: in, v, gate. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://delnorte.is.cloud.invgate.net

Page Load Overview

13.48s
Total Load Time
15
HTTP Requests
4
Domains
310 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:168 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain41% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
41%
technology software
36%
government public service
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
554.225.209.192Ashburn, Virginia, United States
AS14618Amazon.com, Inc.
5162.247.243.39United States
AS54113Fastly, Inc.
53.171.214.60United States
AS16509Amazon.com, Inc.
153--

Detected Technologies4

PasswordField
100%
Amazon Web Services
50%
HSTS
40%
Amazon S3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F1633CD97192B47217B30AEAD03B4042F3365464354DC878B7AEDCE52AE98D9A132F7C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:RyM/lyzrxjsH8k4XREFVg42gQpsmDZnhb501PtriPn/0cs8LFpBoqALyQH+Dh30n:sgMRFvk8bp/ouT0LvLMttztOgci/b6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:70058:wkIBYiTAIECgrWJwlRUWJVAIgAICqY2sHVcBSAhDgCCQTGtAAQUhUwi2EUgAiiAgEqQDqBdDTY2NMcCoQkCIQFDRYChgjEqg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000000000000
Perceptual Hash:8000000000000000
Difference Hash:0000000000000000
Wavelet Hash:0000000000000000
Color Hash:#2dd298

Other Hashes

Crop Resistant:0000000000000000

Scan History

Scan history not available

Unable to load historical scan data