Security Scan Report: sso-3b3d8b64.sso.duosecurity.com

Redirected to:
https://gbm.login.duosecurity.com/email_first?authkey=ASOK7HKWOJRHVMMD...
Site favicon
Submitted: Jul 28, 2026, 1:35:44 PMCompleted: Jul 28, 2026, 1:37:11 PMpubliccompleted

Summary

This website contacted 2 IPs in 1 country across 3 domains to perform 1 HTTP transaction. The main domain is gbm.login.duosecurity.com and was registered 15 years ago.

Submitted URL: https://sso-3b3d8b64.sso.duosecurity.com

Effective URL: https://gbm.login.duosecurity.com/email_first?authkey=ASOK7HKWOJRHVMMDDAO2&scid=6f878f431eba41979ca3ae718f9109a0&req-trace-group=b1a6476c3631e1014a3874eeRedirected

The Cisco Umbrella rank of the primary domain is #1,195 of the top 1 million websitesTop 10K Site

AI Security Verdict

Safe Website

Confidence: 92%

1
Risk Score

The page is a legitimate Duo Security login page with no malicious signals.

Safety Factors
Established domain with long registration history
Official Duo Security subdomain
No malicious indicators in threat intel, YARA, or network alerts
Domain age information unavailable

Details

Page Title

Login

Scan Type

public

Language

🇺🇸

English

(71% confidence)

Category

news media journalism

(42%)

Domain Information

Domain 'sso-3b3d8b64.sso.duosecurity.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'sso-3b3d8b64.sso'. Its registrable label 'duosecurity' stretches across 11 characters split between five vowels and 6 consonants. Splitting it apart reveals 2 words: duo, security. Average segment length settles at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of gbm.login.duosecurity.com

Page Load Overview

4.55s
Total Load Time
30
HTTP Requests
3
Domains
27 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:71%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:71%
Script Type:Latin
Text Length:54 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism42% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism
42%
e-commerce shopping
30%
healthcare medical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1515.197.89.182Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1513.248.248.154Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
302--

Page Statistics

30
Requests
4
Unique Domains
590.8 KB
Total Size

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14C81CA22E860543FC90789EAE0716F9DD0CBCB54CB1257C5F6DD836D8BC88B4162358C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:+GY+NZZeBb44nMdB/N1htzdq+gBtbY6iCJiOT:FY+NZgBnnMh1XZmiCJiW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3890:AIgAogQEQAwEpAAAEscBgkiDFICUAQAAgARUAikCFAoAAIAAAACUAAEBBgKACCAAAGQAIAiAAhAYAEAJCIAYCEgAAAaPAcCR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000081818180000
Perceptual Hash:993366cccc339933
Difference Hash:100c5a3232320800
Wavelet Hash:ccccecfc38380000
Color Hash:#842d86

Other Hashes

Crop Resistant:100c5a3232320800

Scan History

Scan history not available

Unable to load historical scan data