Security Scan Report: provider.evernorth.com

Redirected to:
https://provider.evernorth.com/app/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 41 IPs in 3 countries across 23 domains to perform 73 HTTP transactions. The main domain is evernorth.com and was registered 16 years ago.

Submitted URL: https://provider.evernorth.com

Effective URL:
https://provider.evernorth.com/app/login
Redirected

The Cisco Umbrella rank of the primary domain is #82,732 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

1
Risk Score

Established evernorth.com provider portal (16-year-old domain, top-100K ranked) with self-branding, no credential/payment forms on the captured page and no Indicators of Compromise, hunting rule or phishing IDS hits.

Safety Factors (5)
16-year-old established domain with a top-100K reputation ranking
Content consistent with a genuine healthcare provider portal (provider resources, coverage policies, registration guidance referencing Cigna/Evernorth programs)
No credential or payment collection on the captured page; login is a navigation entry point redirecting elsewhere
No malware, phishing kit or IoC evidence in scanner output
Standard third-party analytics/marketing scripts (Adobe, LaunchDarkly, Dynatrace, Contentful, Cookielaw) consistent with an enterprise site
Domain age information unavailable

Details

Page Title

Evernorth for Health Care Professionals

Scan Type

public

Domain Name Analysis

The domain 'provider.evernorth.com' uses the commercial generic top-level domain (.com) with subdomain 'provider'. Its registrable label 'evernorth' stretches across 9 characters containing three vowels alongside 6 consonants. Splitting it apart reveals 2 words: ever, north. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

HEALTH SERVICES lt ae ae 2 : ) Provider login — Haven't created an account yet? — Use a temporary ID to register @ How to register ‘We use our own and third-party cookles and similar technologi...

Page Load Overview

3.52s
Total Load Time
2.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,264 chars
Detector Agreement:80%

Website Classification

Primary Category

healthcare medical44% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
44%
government public service
31%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3318.66.102.53Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118.66.102.71Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
144.215.161.212Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
123.52.181.12Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
113.33.187.106Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
13.161.82.44Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1143.204.181.123Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
134.141.15.207Google · CDNFrankfurt am Main, Hesse, Germany
AS396982Google LLC
1146.75.121.55Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
118.66.102.25Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
7341--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A854B79B7960922EEEE39B29A38779897521AC8BFD334DDCF10E427407CA7F14C61605

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:0nOXt7Pwt7lyWT4P4CiKXzcY1QJf1FbfxUgSvJF:0nOXt7Pwt7lyWT4P4CiqzcY1QJf1Fbfm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:295982:IkIdag0JCISBIJHAAAoDByJTIKeCBmUL20wDF4y0yAEwHQAYDANIOAGhAAQSMNNSiAOJDAwhAWiGCtACEAALB2GmiSE0Ig5A

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff066767030002ff
Perceptual Hash:a172de5ce243dc23
Difference Hash:649ccecede764e4f
Wavelet Hash:ff076767030002ff
Color Hash:1ee00000040

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data