Security Scan Report: sso-dev.intravision.net

Redirected to: https://sso-dev.intravision.net/realms/master/protocol/openid-connect/auth?client_id=security-admin-console&redirect_uri=https%3A%2F%2Fsso-dev.intravision.net%2Fadmin%2Fmaster%2Fconsole%2F&state=fe95dc56-9e4d-4ecd-91f2-b0c85380ab77&response_mode=query&response_type=code&scope=openid&nonce=a1c4333b-e923-4424-af5e-c56e2586a4ec&code_challenge=gZT-VBGz-ijL3y7NOearBWUq3g5DJLFGAzp48iGRjHo&code_challenge_method=S256

Site favicon
Submitted: Jan 30, 2026, 6:42:05 AMCompleted: Jan 30, 2026, 6:43:30 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 1 country across 4 domains to perform 1 HTTP transaction. The main domain is sso-dev.intravision.net and was registered NaN years ago.

Submitted URL: https://sso-dev.intravision.net/admin/

Effective URL: https://sso-dev.intravision.net/realms/master/protocol/openid-connect/auth?client_id=security-admin-console&redirect_uri=https%3A%2F%2Fsso-dev.intravision.net%2Fadmin%2Fmaster%2Fconsole%2F&state=fe95dc56-9e4d-4ecd-91f2-b0c85380ab77&response_mode=query&response_type=code&scope=openid&nonce=a1c4333b-e923-4424-af5e-c56e2586a4ec&code_challenge=gZT-VBGz-ijL3y7NOearBWUq3g5DJLFGAzp48iGRjHo&code_challenge_method=S256Redirected

AI Security Verdict

High Risk

Confidence: 92%

10
Risk Score

High‑risk phishing page on a brand‑impersonating, newly registered domain.

Risk Factors
Very new domain (<30 days) hosting a credential‑collection form
Brand impersonation on a non‑official domain
Unranked domain with low reputation
Domain age information unavailable

Details

Page Title

Keycloak Administration Console

Scan Type

public

Language

🇺🇸

English

(39% confidence)

Category

corporate business

(74%)

Domain Information

The domain name 'sso-dev.intravision.net' uses the network infrastructure generic top-level domain (.net) with subdomain 'sso-dev'. The second-level label 'intravision' is 11 characters long holding five vowels versus 6 consonants. Tokenizing the label suggests 2 words: intra, vision. Median word length comes out to 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sso-dev.intravision.net/admin/

Page Load Overview

7.16s
Total Load Time
16
HTTP Requests
2
Domains
N/A
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:39%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:39%
Script Type:Latin
Text Length:180 chars
Detector Agreement:50%

Website Classification

Primary Category

corporate business74% confidence
Type: webapp
Method: ml+structural

All Detected Categories

corporate business
74%
documentation technical
52%
technology software
46%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.97.3United States
AS13335Cloudflare, Inc.
4142.251.141.99United States
4142.251.140.170United States
4104.16.79.73United States
164--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T164B1B8918CF50636849B619822B7F7143A37D3036640F788F79CD5598F42ED60CA7EAC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:T7nLlI50ImJcsv0ka7cucPcbqEX4HhKIsWtBcrucsPfnx/IQ6RUhECBFbTma:Ppy2Jzv0ka7cucPcbqOIZtBcjqfnx/j1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5527:gABLCCIEIYSAAhACRDFAMBAJCMQCGhkQASIAsEAmEAEIQAQKAQZJVBAEhRtABO1BpgRAEIEEAAEBklJADEBoAQQAJIgihNAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7ff3f3ffe1e7fff3
Perceptual Hash:e62d99929b996664
Difference Hash:c00606090f0c0006
Wavelet Hash:00e1e1e1e1e5edf1
Color Hash:#8d931f

Other Hashes

Crop Resistant:c00606090f0c0006

Scan History

Scan history not available

Unable to load historical scan data