Security Scan Report: www.remofirst.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 121 IPs in 4 countries across 89 domains to perform 275 HTTP transactions. The main domain is remofirst.com and was registered 4 years 6 months ago.

Submitted URL: https://www.remofirst.com/glossary/employee

AI Security Verdict

Safe Website

Confidence: 90%

0
Risk Score

Legitimate HR glossary article on remofirst.com, a 4-year-old Employer of Record company. Self-branded content, no credential or payment forms, no threat-intel, YARA or IDS hits — no malicious indicators.

Safety Factors (5)
Established domain operating for over 4 years with about/contact pages present
Content is informational HR glossary material with clear self-attribution to RemoFirst
No password, payment, or disguised credential fields present
No Indicators of Compromise, YARA, IDS or Safe Browsing hits
Typical third-party analytics/marketing scripts (HubSpot, Google APIs, DoubleClick) are normal for a SaaS marketing site
Domain age information unavailable

Details

Page Title

What is an Employee?

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.remofirst.com' on the commercial generic top-level domain (.com) with subdomain 'www'. Count 9 characters in 'remofirst' holding three vowels versus six consonants. Splitting it apart reveals two words: remo, first. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.remofirst.com/glossary/employee

Page Load Overview

6.85s
Total Load Time
3.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:12,076 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical47% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
47%
government public service
43%
technology software
33%
corporate business
27%
documentation technical
26%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
35198.202.211.1Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
2104.18.161.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.14.95Google · CDNUnited States
AS15169Google LLC
2172.64.149.114Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.16.141.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
213.226.247.18Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
254.175.23.7Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
2192.178.183.95Google · CDNUnited States
AS15169Google LLC
2142.251.110.97Google · CDNUnited States
AS15169Google LLC
2104.18.36.216Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
275121--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19B04C7779894503A40D384D9E1A26B5DE193D50EDD83C498F2F8C78D3BC4ECAC999B3A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:DoPha8VqOaMuDjslQyNO0xZoM2MNN5QiaFrPZmrKhVHTSEcuheFE4:98w1lnsiM2q5QTSebaF7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:183335:fAQgRiAIWRAJSYkaICSADTOhDwkUKAdAQQJImmgSCFTGjMDhAIsWA8NghhgEBaRGDFBEEmI4qH2AYARQEAAgEgKQLUBYABsm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff8181c3ffffffff
Perceptual Hash:bd6cd3c2d2236c1c
Difference Hash:8033330fc8b3db58
Wavelet Hash:fe808181ff9b098f
Color Hash:#8c40bf

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data