Security Scan Report: empeople.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 35 IPs in 4 countries across 22 domains to perform 115 HTTP transactions. The main domain is empeople.com and was registered 13 years ago.

Submitted URL: https://empeople.com/learn/empeople-insights/how-does-mortgage-refinancing-work/

The Cisco Umbrella rank of the primary domain is #685,377 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Legitimate, long-established credit union (Empeople) publishing a mortgage-refinancing article; self-branded domain, no credential/payment harvesting, no threat-intel, YARA or IDS hits.

Safety Factors (5)
Well-established domain (13 years old) with matching self-branding
Article/news content page with clear byline and update date
Login form is a same-organization SSO flow to my.empeople.com, not cross-domain credential harvesting
No credential, payment or disguised password fields present
No threat-intelligence, YARA, IDS or Safe Browsing signals
Domain age information unavailable

Details

Page Title

How Does Refinancing Work and When To Refinance My Mortgage -

Scan Type

public

Domain Name Analysis

You're looking at domain 'empeople.com' on the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'empeople' spans 8 characters containing four vowels alongside 4 consonants. It segments into two words: em, people. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://empeople.com/learn/empeople-insights/how-does-mortgage-refinancing-work/

Page Load Overview

10.60s
Total Load Time
3.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:10,596 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking52% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
52%
news/blog
50%
corporate
35%
technology software
28%

Detected Features

Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13172.66.40.86Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
334.8.56.4Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3142.251.127.95Google · CDNUnited States
AS15169Google LLC
318.66.102.51Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3142.250.154.97Google · CDNUnited States
AS15169Google LLC
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
365.9.130.127Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
323.194.190.148Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
3157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
3146.75.120.84Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
11535--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B4E3E6A71DCC24BB51AF6284F1DCF21CB7C54215CBC18AD9B3F99199CF92E9612E3908

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:rcg5sh+ZC2daLcp14LSmInzQmFhARbcrqVxEAPyuq+toVUVp7iyV:rcSC4a7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:148571:BJABIACBiSILiAGFBkNQli7Y5hEUzpItANBmHABUYUyIziCRADTmG2jQxKqDGuoiwAJqGBjCUgFtAdIAABVFPhIDAg+KoAxN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00000002ffffff
Perceptual Hash:8707f8f247c2d83c
Difference Hash:496a5a4a6a343e3c
Wavelet Hash:ff00000000ffffff
Color Hash:#2d8649

Scan History

Scan history not available

Unable to load historical scan data