ScanMalware.com

Security Scan Report: cluster346.canvas-user-content.com

Redirected to: https://b2b0c970-8c97-44e8-bc56-a029b47c90c1.iad.login.instructure.com/?goto=https%3A%2F%2Fb2b0c970-8c97-44e8-bc56-a029b47c90c1.iad.login.instructure.com%2Fam%2Foauth2%2Falpha%2Fauthorize%3Fauthentication_provider%3D79175795-479a-4154-8335-43264065b1fb%26client_id%3Dcanvas-prod-iad%26nonce%3Dc41235225b550d8a59653567d9ce1a0ca33edd78fd6ae9b4%26org_id%3Db2b0c970-8c97-44e8-bc56-a029b47c90c1%26redirect_uri%3Dhttps%3A%2F%2Fsso.canvaslms.com%2Flogin%2Foauth2%2Fcallback%26response_type%3Dcode%26scope%3Dopenid%2520profile%26state%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhYWNfaWQiOjcwMDAwMDAwMDAxNzUyLCJub25jZSI6ImM0MTIzNTIyNWI1NTBkOGE1OTY1MzU2N2Q5Y2UxYTBjYTMzZWRkNzhmZDZhZTliNCIsImhvc3QiOiJjYW52YXMuaW5zdHJ1Y3R1cmUuY29tIiwidGFyZ2V0X2F1dGhfcHJvdmlkZXIiOiI3OTE3NTc5NS00NzlhLTQxNTQtODMzNS00MzI2NDA2NWIxZmIiLCJleHAiOjE3NjY3NzA4NDZ9.4CubHCZefOFCMayh1OuOQmNZFaEm2fPwT7xd2fyc5cw%26target_domain%3Dhttps%3A%2F%2Fcanvas.instructure.com&realm=/alpha

Submitted: Dec 26, 2025, 5:30:40 PMCompleted: Dec 26, 2025, 5:31:02 PMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 4 domains to perform 37 HTTP transactions. The main domain is b2b0c970-8c97-44e8-bc56-a029b47c90c1.iad.login.instructure.com and was registered NaN years ago.

Submitted URL: https://cluster346.canvas-user-content.com

Effective URL: https://b2b0c970-8c97-44e8-bc56-a029b47c90c1.iad.login.instructure.com/?goto=https%3A%2F%2Fb2b0c970-8c97-44e8-bc56-a029b47c90c1.iad.login.instructure.com%2Fam%2Foauth2%2Falpha%2Fauthorize%3Fauthentication_provider%3D79175795-479a-4154-8335-43264065b1fb%26client_id%3Dcanvas-prod-iad%26nonce%3Dc41235225b550d8a59653567d9ce1a0ca33edd78fd6ae9b4%26org_id%3Db2b0c970-8c97-44e8-bc56-a029b47c90c1%26redirect_uri%3Dhttps%3A%2F%2Fsso.canvaslms.com%2Flogin%2Foauth2%2Fcallback%26response_type%3Dcode%26scope%3Dopenid%2520profile%26state%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhYWNfaWQiOjcwMDAwMDAwMDAxNzUyLCJub25jZSI6ImM0MTIzNTIyNWI1NTBkOGE1OTY1MzU2N2Q5Y2UxYTBjYTMzZWRkNzhmZDZhZTliNCIsImhvc3QiOiJjYW52YXMuaW5zdHJ1Y3R1cmUuY29tIiwidGFyZ2V0X2F1dGhfcHJvdmlkZXIiOiI3OTE3NTc5NS00NzlhLTQxNTQtODMzNS00MzI2NDA2NWIxZmIiLCJleHAiOjE3NjY3NzA4NDZ9.4CubHCZefOFCMayh1OuOQmNZFaEm2fPwT7xd2fyc5cw%26target_domain%3Dhttps%3A%2F%2Fcanvas.instructure.com&realm=/alphaRedirected

The Cisco Umbrella rank of the primary domain is #2,693 of the top 1 million websitesTop 10K Site

AI Security Verdict

Low Risk

Confidence: 92%

2
Risk Score

Legitimate Canvas login flow with minor suspicious form pattern

Risk Factors
Password field without accompanying username field
Multiple redirects (7) may indicate redirect manipulation
Safety Factors
Final destination is the official Canvas login domain
Domain is well‑established and has a high Cisco Umbrella ranking (top 10k)
No malicious Indicators of Compromise detected
No external domains referenced
Page title aligns with expected Canvas login
Domain age information unavailable

Details

Page Title

Log in to Canvas

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(88%)

Domain Information

The domain name 'cluster346.canvas-user-content.com' uses the commercial generic top-level domain (.com) with subdomain 'cluster346'. The registrable portion 'canvas-user-content' spans 19 characters with 6 vowels and eleven consonants; it also includes two hyphens. Segmentation suggests 3 words: canvas, user, content. Median word length comes out to six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cluster346.canvas-user-content.com

Page Load Overview

5.46s
Total Load Time
25
HTTP Requests
4
Domains
104 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:328 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software88% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
88%
social media network
77%
education learning
49%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1318.173.205.81United States
AS16509AMAZON-02
1254.160.47.144Ashburn, Virginia, United States
AS14618AMAZON-AES
252--

Detected Technologies2

PasswordField
100%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17E92925952B237BB187A70DE41C35E1970A2F45FDE81B8F0D0ED4E6A02BAC3E34A3556

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:7/qV6ebJsOpN8HlkyoaeviKFQKJ8al6JomQ9pUJ3BJFJl+WCpJFJE1Qh/CrFmY1j:c1sOpN8HlkyoMKFQKJ8al6JomQ9pU3D7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19849:ZlABkCMA8kohCwFAoEjA8CgAqQaLBYBcMFECEYUVDEBJoCY4HCgY3NAQ9gMkORQGJeQXBYNhBsWAAUBFIKQVahbAgELRgOMR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data