ScanMalware.com

Security Scan Report: www.tiaa-cref.org

Redirected to:
https://www.tiaa.org/public
Submitted: Apr 11, 2026, 4:07:06 PMCompleted: Apr 11, 2026, 4:08:49 PMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is tiaa.org and was registered NaN years ago.

Submitted URL: https://www.tiaa-cref.org

Effective URL: https://www.tiaa.org/publicRedirected

The Cisco Umbrella rank of the primary domain is #151,531 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 80%

2
Risk Score

The site shows a brand mismatch but is old, has no malicious activity, and redirects to the official TIAA domain, resulting in low risk.

Risk Factors
Low Cisco Umbrella ranking (151,531) for a well‑known brand
Brand mismatch between meta tags and domain
Safety Factors
Very old domain registration (1991)
No malicious scripts or exfiltration behavior
No credential collection forms
Final URL points to the legitimate TIAA site
Domain age information unavailable

Details

Bot Protection Detected

This website is protected by bot_detected bot protection. Our scanner was challenged or blocked during access.

Page Title

YOUR REQUEST HAS BEEN BLOCKED! Your Reference ID # is: 18.1d68dd58.1775923738.1818166f

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

You're looking at domain 'www.tiaa-cref.org' on the non-profit oriented generic top-level domain (.org), featuring subdomain 'www'. The second-level label 'tiaa-cref' is 9 characters long with four vowels and four consonants, along with 1 hyphen. Tokenizing the label suggests four words: tia, a, c, ref. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.tiaa-cref.org

Page Load Overview

6.69s
Total Load Time
181
HTTP Requests
45
Domains
2.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:8,018 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18123.56.205.123Frankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
1811--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BE72D6B11E98393C216B426DB7F1B74A355F8832DE0700DBF66B958997C3D904833E94

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:qlPoV4nWoaU+grxCWgUtOWC9VOlwtOCR5V2WMxKrwtO6V:h4nV+mdZCGV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17261:jixAAhJhAOIKiAMRrhxUyHNyfxnJeOAQxkFBCUnBJABUIgWJKIAAxBwQAJDCAgAlBgiI0iFKSxxdggAkRALwDRQHAlQ9gNDi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7efff0000003c
Perceptual Hash:f7b7882c9acc9906
Difference Hash:260c0c0c4c960659
Wavelet Hash:ffe7efff0000001c
Color Hash:#d27e79

Other Hashes

Crop Resistant:260c0c0c4c960659

Scan History

Scan history not available

Unable to load historical scan data