Security Scan Report: portal.salussafety.io

Redirected to:
https://guardian.salussafety.io/login/?response_type=code&client_id=3a...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 1 country across 13 domains to perform 45 HTTP transactions. The main domain is salussafety.io and was registered 5 years ago.

Submitted URL: https://portal.salussafety.io

Effective URL:
https://guardian.salussafety.io/login/?response_type=code&client_id=3a...
Redirected

The Cisco Umbrella rank of the primary domain is #501,122 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 88%

1
Risk Score

Legitimate SALUS account login on a 5-year-old self-branded domain; the redirect to guardian.salussafety.io is a same-company OAuth SSO flow, and no threat-intel, hunting rule or IDS evidence was found.

Safety Factors (5)
Established 5-year-old domain on standard hosting, not cloud storage or IPFS
Self-branding (page title and content match its own domain), no impersonation of another entity
OAuth code-challenge (S256 PKCE) flow to a sibling subdomain of the same company domain
No malicious scripts, kit-roster entries, or network IDS hits
Terms and Privacy Policy linked before authentication
Domain age information unavailable

Details

Page Title

Login | SALUS

Scan Type

public

Domain Name Analysis

The domain name 'portal.salussafety.io' uses the British Indian Ocean Territory country-code top-level domain (.io); it also runs on subdomain 'portal'. The core label 'salussafety' covers 11 characters split between four vowels and seven consonants. Word splitting yields 3 words: s, alus, safety. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://portal.salussafety.io

Page Load Overview

6.49s
Total Load Time
4.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:556 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software60% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
60%
government public service
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1152.42.67.249Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
2184.33.41.190Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
2142.251.13.95Google · CDNUnited States
AS15169Google LLC
2104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2216.198.54.3Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
252.200.98.16Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
2216.198.53.6Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
213.32.121.2Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
218.245.86.4Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2104.18.38.131Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4518--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DF535893F6E6044F2167157E0825F7F93B3D01984B41AFB52329B6B916C93CAEE7B081

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:E0bCzQNGpuzSjMRQ/ujYZqjyxAXEjmDST8hK5MVmR2pCPCrGTjl:XbCzQNGpuzSjMRQ/ujYZqjyxAXEjmDSH

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:66412:ikZYEoHiELiYxuQQAUGAmBPwIBETqmUChoJQBAoiMgQhT4EDRKqVCCRQlJCwoIQDK9BTABJUJBGI8LQAhCRwoAVJMQKkACME

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7ffe7e7ffffffff
Perceptual Hash:b333cccc3333338c
Difference Hash:4c084c4c10080000
Wavelet Hash:c0c1c1c1c1c9cfce
Color Hash:N/A

Other Hashes

Crop Resistant:4c084c4c10080000

Scan History

Scan history not available

Unable to load historical scan data