Security Scan Report: beaumont.nuancempower.com

Redirected to:
https://sso.corewellhealth.org/idp/SSO.saml2?SAMLRequest=fZFNb4MwDIbP%...
Site favicon
Submitted: Jun 14, 2026, 12:42:11 AMCompleted: Jun 14, 2026, 12:43:28 AMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 1 country across 3 domains to perform 3 HTTP transactions. The main domain is sso.corewellhealth.org and was registered NaN years ago.

Submitted URL: https://beaumont.nuancempower.com

Effective URL: https://sso.corewellhealth.org/idp/SSO.saml2?SAMLRequest=fZFNb4MwDIbP%2BxdV7oUkQqyzAKlTD6u0qWigHXqZEkgLEjgsDtp%2B%2FvjYobvUN8uP7devE1J9N8B%2B9A2%2Bm6%2FRkN%2F89B0SLIWUjQ7BKmoJUPWGwFdQ7N9eQQYcBme9rWzHNlM8HKbeFpVvLaas8X4gCEMiG1TWmW%2FTdY1RnW8C665hWw9hUZyCeYlc2o%2BHlH1Gl10lhea7eCfiJ1HzR220kDXXsVQXcVlJotEckbxCnzLJZbzl8VZEJecQSRDRecHyP3HPLdYtXu9foleI4KUs821%2BKkq2%2BTCOllsmgGXJLBWW3e7GoftjFZFxsyEsmzE1ucwBR4WVaeoBtFFjb9G7vkrCm%2FnZmv1%2FS%2FYL&RelayState=NpSbjjBT6wsFuKZzXDgsaF_dMOVPqW9H&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=abN2vEFJtMoSKzn2FiE5T83tFug11%2Fz%2FBgXXoAVX4N4iW8Jz7Tc2x28IS%2BmZXPQioCRDFLJnI%2BtLxZBGfpy89tvZSmTWtFwZgPE2JK5XwteZLpDQKg1jxvr%2BflsxHunQlT%2BtPeug6SzRAjl53YsP7UfgxJ%2BqVjFDWPDs8U9T%2FxiR7Z7yMCQWcYpsc%2BBiRlVnA6u44Xk5NbQYzqc%2BxUY%2BJzKyWC8I%2FV8rhpVNg4B%2FQ4TUxb8hWC4O2KAyf%2FDkvcG%2Be7BhXvVPjIlHWFbDu8xzSRDcv70vil8kF0%2FV5eOlK%2BYBAzHwjLZM%2F%2BEVn%2BMfX1Gy%2FlfAWLzwz%2FJObxVDLGN%2Fsw%3D%3DRedirected

The Cisco Umbrella rank of the primary domain is #342,630 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 78%

4
Risk Score

Login page shows brand name on a low‑ranked, old domain; no malware signs but moderate phishing risk.

Risk Factors
Low domain ranking for a site displaying a known brand name
Credential collection on a domain that does not match the brand
External SSO redirect may be used to harvest credentials
Safety Factors
Domain age >9 years (well‑established)
No malicious IoC or YARA detections
No network IDS alerts
Cross‑origin submission appears to be a legitimate SSO flow
Domain age information unavailable

Details

Page Title

Sign On

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(44%)

Domain Information

Within the commercial generic top-level domain (.com), 'beaumont.nuancempower.com' is registered with subdomain 'beaumont'. Its registrable label 'nuancempower' stretches across 12 characters split between 5 vowels and seven consonants. Breaking it apart gives 3 words: nuance, m, power. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://beaumont.nuancempower.com

Page Load Overview

8.59s
Total Load Time
11
HTTP Requests
3
Domains
202 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:219 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software44% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
44%
phishing scam
31%
cryptocurrency blockchain
29%
adult content
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5104.18.37.18United States
AS13335Cloudflare, Inc.
3167.73.15.243Wyoming, Michigan, United States
AS30710Spectrum Health
3150.171.109.51United States
AS8075Microsoft Corporation
113--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T145E18276ACF64472062324B927FBE6493F70C223950FA844B5AC4F855FA2D84CC63F99

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:QsuR9KlCHoPGrEHesSslF/7nd/a/U/+Auj/A/aGkly1XX+/a:eAOrs9SoF/7nd/a/U/+Au/A/aHlmXXN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7157:AkkAyCBCA4FAAQCwoAY0GhgAoykQIECVnE1JhGAMgIFAiCQcM0JAcAAUcDAZdhBwlQ4JgyQRgKSCARJBhAciIcJAIEFF6DQ0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818181800000000
Perceptual Hash:9999983366cecccc
Difference Hash:b2b2b2b24c300030
Wavelet Hash:3c3c3c3c00000018
Color Hash:#6ce0aa

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data