Security Scan Report: careanyware.com

Redirected to:
https://careanyware.com/global-protect/login.esp
Site favicon
Submitted: Jul 4, 2026, 3:40:04 PMCompleted: Jul 4, 2026, 3:41:42 PMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is careanyware.com and was registered NaN years ago.

Submitted URL: https://careanyware.com

Effective URL: https://careanyware.com/global-protect/login.espRedirected

The Cisco Umbrella rank of the primary domain is #132,754 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 88%

3
Risk Score

The site impersonates Palo Alto Networks and harvests credentials via a login form, indicating a high‑risk phishing scam.

Risk Factors
Brand impersonation of Palo Alto Networks
Credential collection on a non‑official domain
Low reputation ranking for a brand‑claiming site
Safety Factors
Domain is well‑established (over 24 years old)
No malicious JavaScript patterns or network alerts
No external form action or credential exfiltration observed
Top-ranked domain (Cisco Umbrella #132,754, 8869 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 8 to 3
Domain age information unavailable

Details

Page Title

GlobalProtect Portal

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

The domain 'careanyware.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'careanyware' stretches across 11 characters with five vowels and 6 consonants. Tokenizing the label suggests three words: care, any, ware. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://careanyware.com

Page Load Overview

4.19s
Total Load Time
12
HTTP Requests
1
Domains
839 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:41 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1272.15.246.30Hillsboro, Oregon, United States
AS13649Flexential Colorado Corp.
121--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T179328315D5BB0822264BA0BD1EEA950A3CB0C4170205DB007DBC96D95FA7E5BC8BF7DD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:/NZZfiRiCia2MhAini3i12iDiSyrkiBi+pijwPi6FSCEib24iUviJZiViBuMCWKC:ZiRiCiaMini3iIiNiBiIiWiRiriUiPiO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11622:UEQ0CqACc9AIkuAYAUFQwQUBYRihSuAMTtC8knKAGBdkBWiJQRkCAQIkHLCAAMPFA2LCAiqMMyCwWCRCBc6gkSDBNQqCiIIS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:88c5e7ffe7ffffff
Perceptual Hash:f27a585819193737
Difference Hash:10ad4c100c080000
Wavelet Hash:0000e7e7e0f8f0f0
Color Hash:#d22d72

Other Hashes

Crop Resistant:10ad4c100c080000

Scan History

Scan history not available

Unable to load historical scan data