ScanMalware.com

Security Scan Report: portal.istatmed.com

Redirected to:
https://auth.statsafe.co/u/login/identifier?state=hKFo2SAxRnU0NVJnMTIy...
Submitted: Jul 19, 2026, 5:16:24 PMCompleted: Jul 19, 2026, 5:17:46 PMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 1 country across 4 domains to perform 2 HTTP transactions. The main domain is auth.statsafe.co and was registered NaN years ago.

Submitted URL: https://portal.istatmed.com

Effective URL: https://auth.statsafe.co/u/login/identifier?state=hKFo2SAxRnU0NVJnMTIyWE9tOTZ0UkZKbllvUHZQWGlnVHBPVaFur3VuaXZlcnNhbC1sb2dpbqN0aWTZIHdYaUNCUE1fZ3hoYzM2Y3pTYmRZYnpJTlFZMkdtT1cto2NpZNkgemVrUHoweHVuN3o0SnFrYlRkaGJSRVNiS2FlaXFVaW4Redirected

The Cisco Umbrella rank of the primary domain is #519,792 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 85%

3
Risk Score

Site impersonates the Statsafe brand, presents a login form, and redirects to another domain, indicating credential phishing.

Risk Factors
Impersonation of a different entity's brand
Login form capturing credentials
Cross‑origin redirect to a different domain for authentication
Safety Factors
No Indicators of Compromise matched
No JavaScript malware YARA patterns detected
No network IDS alerts
Domain age 989 days (well‑established)
No payment fields or malicious scripts
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 3
Domain age information unavailable

Details

Page Title

Log in | Web Portal

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government public service

(72%)

Domain Information

The domain name 'portal.istatmed.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'portal'. The core label 'istatmed' covers 8 characters split between 3 vowels and 5 consonants. Breaking it apart gives 2 words: istat, med. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://portal.istatmed.com

Page Load Overview

5.38s
Total Load Time
11
HTTP Requests
4
Domains
35 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:193 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service72% confidence
Type: webapp
Method: ml+structural

All Detected Categories

government public service
72%
technology software
68%
corporate business
67%
news media journalism
56%
adult content
49%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5172.64.144.74Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
244.236.100.235Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
234.214.232.199Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
218.64.195.35Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
114--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15B331BD931E171731AA7117660DF604AA235A9438C0ECD00B86EDAD06FBCFA65F27E5C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:1wyMStn9rKKEdcufLW9r+FKLQnKwTf29sK:Kynn9rK3cuM+FahsK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:52553:UBgwK8YRdsv+oqGKDACAUjQmgEwG4WVRgJoiDEhBEYkLRKAXgKQFAIgIFMwAHAAAQAUAAHQrEIFgIFTgJcC2aDFLFU5AACRp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181818181800
Perceptual Hash:dd88367722dddd00
Difference Hash:4cb2b2b2b232324d
Wavelet Hash:0818383818989800
Color Hash:#d279a0

Other Hashes

Crop Resistant:e89696cc80333380,4cb2b2b2b232324d

Scan History

Scan history not available

Unable to load historical scan data