Security Scan Report: av.confirmation.com

Redirected to:
https://auth.thomsonreuters.com/u/login/identifier?state=hKFo2SBCTDJlV...
Site favicon
Submitted: Sep 24, 2026, 11:08:48 PMCompleted: Sep 24, 2026, 11:09:25 PMpubliccompleted

This website contacted 17 IPs in 2 countries across 9 domains to perform 54 HTTP transactions. The main domain is auth.thomsonreuters.com and was registered 6 years ago.

Submitted URL: https://av.confirmation.com

Effective URL:

https://auth.thomsonreuters.com/u/login/identifier?state=hKFo2SBCTDJlV...
Redirected

The Cisco Umbrella rank of the primary domain is #146,545 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 88%

1
Risk Score

Official Thomson Reuters Confirmation sign-in served on Thomson Reuters' own auth domain via legitimate SSO. No impersonation, no exfiltration, no threat-intel hits.

Safety Factors (4)
Login is served on the brand's official domain with a legitimate SSO handoff
No credential exfiltration; cross-origin POST targets the owning brand's auth service
Zero threat-intelligence, YARA, or IDS indicators across the page and its resources
Standard enterprise services (Auth0, Arkose Labs, Datadog RUM) present
Domain age information unavailable

Details

Page Title

Sign in to Confirmation Asset Verification | Thomson Reuters

Scan Type

public

Domain Name Analysis

The domain name 'av.confirmation.com' uses the commercial generic top-level domain (.com), featuring subdomain 'av'. Count 12 characters in 'confirmation' containing five vowels alongside seven consonants. Tokenizing the label suggests 1 word: confirmation. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://av.confirmation.com

Page Load Overview

3.44s
Total Load Time
3.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:281 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking41% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking
41%
technology software
33%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6108.138.26.129Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3108.138.26.112Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3108.138.26.117Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3108.138.26.118Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
334.111.138.51Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3146.75.123.9Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
318.235.18.208Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
33.233.158.27Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
33.233.158.34Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
3104.18.43.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5417--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T126238491F449426F573B083274CDFE422C06601AD355969FBA2E4A686CEF95F82B0F1F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:tc2rIeAyvchyY6cY6Z6nEFpWm2EJAMTtyB16B1vNUd74ObODv5naBPTBaCvvKddV:vhA98bn8KYLLYUBT3KXmNwrmAViB

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:47100:A4TECwSAWCSQgYlkHcBQWUch4AyESRKEhJQUBsnQB1DQAwGMJABRGLsqAyBFKaJwW0wGEDAAEUYIiBcAAKEIZBMTyRqoorIe

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffedfefeffffff00
Perceptual Hash:d3db0aac079d1d8c
Difference Hash:e14958582c100048
Wavelet Hash:3da0f8ece0fbc800
Color Hash:#e0a66c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data