Security Scan Report: athenahealth.us-4.evergage.com

Redirected to:
https://athenahealth.us-4.evergage.com/ui/login.html
Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 2 domains to perform 24 HTTP transactions. The main domain is evergage.com and was registered 13 years ago.

Submitted URL: https://athenahealth.us-4.evergage.com

Effective URL:
https://athenahealth.us-4.evergage.com/ui/login.html
Redirected

The Cisco Umbrella rank of the primary domain is #3,207 of the top 1 million websitesTop 10K Site

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Legitimate Salesforce Personalization (Evergage) login portal on a 13-year-old, top-10K-ranked domain. Tenant-branded customer login, no impersonation, no threat-intel or malware signals.

Safety Factors (5)
Well-established domain (registered 2013-02-23, ~4980 days old)
Cisco Umbrella ranking 3207 (top 10K)
No threat-intel, YARA, kit-roster or IDS matches
No cross-origin credential submission or exfiltration
Login flows are standard product authentication, not brand impersonation
Domain age information unavailable

Details

Page Title

Login | Salesforce Personalization

Scan Type

public

Domain Name Analysis

The domain 'athenahealth.us-4.evergage.com' uses the commercial generic top-level domain (.com) and includes subdomain 'athenahealth.us-4'. Its registrable label 'evergage' stretches across 8 characters split between four vowels and 4 consonants. It segments into two words: ever, gage. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://athenahealth.us-4.evergage.com

Page Load Overview

12.65s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:45%
Script:Latin
Direction:ltr

Detection Details

Text Length:4,013 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software58% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
58%
documentation technical
54%
real estate property
52%
healthcare medical
52%
corporate business
48%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
335.161.160.205Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
3151.101.192.114Fastly · CDNUnited States
AS54113Fastly, Inc.
354.189.196.241Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
344.241.202.123Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
334.214.177.90Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
316.147.153.83Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
332.184.204.166Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
3151.101.64.114Fastly · CDNUnited States
AS54113Fastly, Inc.
248--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B013942190F21952028687B436D59B473FF1D953C507582836FC2BEC2FEFD839A672A6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:s/7ckXVbD8XFyF2X7vY77xEVCj6PDGle+RzRCq:aXdyUMkoCuq80

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:41822:UDAAGVRgQEZQgDLCNVIFkweTMDIByCgGPBIiCQgIKAGqAlcIrZgPKOMIMYBikBxRCABAYJgQyYFhgBOswKgIuARkgGqgQiav

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fcfcf8f0f0f0f0f0
Perceptual Hash:e6994d662cdbe1a0
Difference Hash:2060c02424a42524
Wavelet Hash:f0f0f0f0f0f0f0f0
Color Hash:#b7bf40

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data