ScanMalware.com

Security Scan Report: uhcwed.medirota.com

Site favicon
Submitted: Jul 1, 2026, 1:21:38 PMCompleted: Jul 1, 2026, 1:22:50 PMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 2 countries across 2 domains to perform 2 HTTP transactions. The main domain is uhcwed.medirota.com and was registered NaN years ago.

Submitted URL: https://uhcwed.medirota.com

The Cisco Umbrella rank of the primary domain is #613,517 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 80%

3
Risk Score

Login page on an old, self‑branded domain; no malicious indicators but credential form triggers high risk.

Risk Factors
Credential collection form present
Low domain ranking for a brand claim
Eval() usage in JavaScript
Safety Factors
Domain age > 5 years (well‑established)
Self‑branding aligns with domain
No external form submission or credential exfiltration
No malicious IoC or YARA detections
Top-ranked domain (Cisco Umbrella #613,517, 6267 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 7 to 3
Domain age information unavailable

Details

Page Title

Home | Medirota

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(57%)

Domain Information

You're looking at domain 'uhcwed.medirota.com' on the commercial generic top-level domain (.com) with subdomain 'uhcwed'. Its registrable label 'medirota' stretches across 8 characters split between four vowels and four consonants. Segmentation suggests 2 words: medi, rota. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://uhcwed.medirota.com

Page Load Overview

3.10s
Total Load Time
32
HTTP Requests
2
Domains
223 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:790 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software57% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
57%
healthcare medical
55%
documentation technical
39%
government public service
38%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16185.111.111.155Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
1681.91.246.230Camden, England, United Kingdom
AS29668vXtream Ltd
322--

Detected Technologies7

X-UA-Compatible
100%
PasswordField
100%
JQueryv3.3.1
100%
HSTS
40%
jQuery UI
20%
Moment.js
20%
DataTables
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15E0221628C404C2B02130ED2E231B21CA7719B7DCD32DC86BBFD46AE9B96FE55D52E45

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:n+83jaLF0zJRDW9i8X6MAxciqo93S5Nqd+UbR6SF7VC9RL+sY0lxjyzvx61pp:+GsIoRiD93S/MpcZ1X

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8476:AEmukCAoJVGwBgoAKJwTAIcwIEBIjSUKsxV0DKYDEQw1TBINAgMElYRQQAPISgQKIheEgCJYIULAfAEBcELCQkxiAFEYBUAM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00001e1e1e1c0000
Perceptual Hash:949867699b369c9a
Difference Hash:02503c3c38380e24
Wavelet Hash:3e3e9e9e3e3e0002
Color Hash:#cc6ce0

Other Hashes

Crop Resistant:02503c3c38380e24

Scan History

Scan history not available

Unable to load historical scan data