ScanMalware.com

Security Scan Report: ddpaa0-prod.deltadentalil.com

Redirected to:
https://auth.deltadental.com/login?state=hKFo2SBSTTRXQ2dGSy1lWlZLVktZU...
Submitted: Jul 6, 2026, 9:20:48 PMCompleted: Jul 6, 2026, 9:21:57 PMpubliccompleted

Summary

This website contacted 7 IPs in 1 country across 8 domains to perform 2 HTTP transactions. The main domain is auth.deltadental.com and was registered NaN years ago.

Submitted URL: https://ddpaa0-prod.deltadentalil.com

Effective URL: https://auth.deltadental.com/login?state=hKFo2SBSTTRXQ2dGSy1lWlZLVktZUFRMU2FRYkRQUUhyNW91RqFupWxvZ2luo3RpZNkgeWxzaVpqSEROZXBDd3FuTzZCdkliQlFFRDlpNGNtNFijY2lk2SByWFZEem5oVmV0OHdVSFVDclRsWHhBWjNTSFJub1BEZQ&client=rXVDznhVet8wUHUCrTlXxAZ3SHRnoPDe&protocol=oauth2&display=roleMember&application_override_client_id=TvsYERKDCDXc7LkIiywQhQqTpwhF2JcV&redirect_uri=https%3A%2F%2Fddil-auth.deltadental.com%2Flogin%2Fcallback&response_mode=form_post&response_type=id_token&scope=email%20openid%20phone%20profile&nonce=Iu3dqfxsO7jb9Xxc-7flpDIKq6j3YDtv86MjdN5W7MsRedirected

The Cisco Umbrella rank of the primary domain is #375,480 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 94%

3
Risk Score

The site impersonates Delta Dental, hosts a login form, and exfiltrates credentials via obfuscated JavaScript – confirmed phishing scam.

Risk Factors
Brand impersonation of Delta Dental
Credential exfiltration to external domain
High‑entropy, heavily obfuscated JavaScript
Low domain ranking for a brand‑claiming site
Cross‑origin POST to identity.deltadental.com
Safety Factors
Top-ranked domain (Cisco Umbrella #375,480, 11493 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 10 to 3
Domain age information unavailable

Details

Page Title

Delta Dental Sign In

Scan Type

public

Language

🇺🇸

English

(50% confidence)

Category

unknown

(0%)

Domain Information

Domain 'ddpaa0-prod.deltadentalil.com' uses the commercial generic top-level domain (.com) with subdomain 'ddpaa0-prod'. Its registrable label 'deltadentalil' stretches across 13 characters split between five vowels and eight consonants. Splitting it apart reveals 3 words: delta, dental, il. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ddpaa0-prod.deltadentalil.com

Page Load Overview

2.11s
Total Load Time
20
HTTP Requests
8
Domains
172 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:50%
Script Type:Latin
Text Length:530 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8104.16.40.28Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
266.36.21.30Franklin Park, Illinois, United States
AS17378TierPoint, LLC
2104.18.36.87Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
218.172.112.126Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
218.64.195.35Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
207--

Page Statistics

20
Requests
8
Unique Domains
287.2 KB
Total Size

Detected Technologies5

X-UA-Compatible
100%
PasswordField
100%
Bootstrapv3.3.7
100%
Cloudflare
50%
cdnjs
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10803D72618B219730553B4AEE2CF64403A7195070C06E9447ABCF7041FABE6A8EB77DF

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:X3qsYBJx3D0vqPHjEvgo8gTZgqvGG0Hh/vR2hhD:6KL8wZIG0Hh/gzD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40490:KKsEUUBJZUgYeAtFEJAgIFGAkmEGyR0yooGyCCCCAJkE4YoGwJhBoqAhgDYmgBigQgBlq6DcqEByCaJIkoOUAKEXjiAAgUDi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7e7e7ffff
Perceptual Hash:b3336666339989cc
Difference Hash:0c0c0c1c0c080000
Wavelet Hash:04042424e4e4fcfc
Color Hash:#a0d279

Other Hashes

Crop Resistant:0c0c0c1c0c080000

Scan History

Scan history not available

Unable to load historical scan data