Security Scan Report: landing.caregility.net

Redirected to:
https://uhesso.univago.com/?redirect_uri=https://landing.caregility.ne...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 1 country across 5 domains to perform 18 HTTP transactions. The main domain is caregility.net and was registered 6 years ago.

Submitted URL: https://landing.caregility.net/change-password

Effective URL:
https://uhesso.univago.com/?redirect_uri=https://landing.caregility.ne...
Redirected

The Cisco Umbrella rank of the primary domain is #234,833 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 68%

2
Risk Score

Health-care software dashboard behind an SSO redirect; no password or payment fields, no Indicators of Compromise, hunting rule or IDS hits. Bot-protection mismatch is ordinary. Only caveat: the final SSO host's age is unknown.

Safety Factors (4)
No password, disguised-password or payment fields present on the captured page
No Indicators of Compromise, malware patterns, IDS alerts or kit-roster matches
Cross-origin form action is a recognized SSO authentication flow rather than credential harvesting
Page content (dashboard/healthcare software) matches the technology-software classification, with no brand impersonation of a different entity
Domain age information unavailable

Details

Page Title

Dashboard - Caregility

Scan Type

public

Domain Name Analysis

Within the network infrastructure generic top-level domain (.net), 'landing.caregility.net' is registered and includes subdomain 'landing'. The second-level label 'caregility' is 10 characters long holding 4 vowels versus 6 consonants. Segmentation suggests three words: care, gili, ty. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://landing.caregility.net/change-password

Another page of the site in scan f2886f4b

Page Load Overview

3.06s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:22 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software67% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
67%
documentation technical
64%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
652.182.230.147Azure · CLOUDDes Moines, Iowa, United States
AS8075Microsoft Corporation
2142.251.14.95Google · CDNUnited States
AS15169Google LLC
252.254.114.2Azure · CLOUDBoydton, Virginia, United States
AS8075Microsoft Corporation
2104.20.17.167Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23.41.202.146Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
2172.66.166.164Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23.41.202.144Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
187--

Detected Technologies2

Nginxv1.19.8
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D5110EE7CC38940D221057ABAD21F12CC8DB5A2DDE519D90B5E600568EE0FE04856A1B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:haHpV6GN/E5Z6AGIhewZvVdQQn1WdsObzW1TW+bOL/opa:ErN6XzrQuK+8+iL/h

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1035:AAAQAAAAAAAAAAAAAIAAAAAAAAAAAAAgAACEAAQAAAAAgAhAAAAAACAAAAAAABAAUQAAEAAAAAAAAAABAAAAAAAAAAAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0038383838383818
Perceptual Hash:cd72323732cc32cd
Difference Hash:05f1f37373737371
Wavelet Hash:007c7cfc3c3c3c3c
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data