Security Scan Report: es.ira.empower-retirement.com

Redirected to: https://ira.empower-retirement.com/participant/#/login

Submitted: Jan 21, 2026, 10:25:01 AMCompleted: Jan 21, 2026, 10:26:14 AMpubliccompleted
Loading additional data...

Summary

This website contacted 10 IPs in 2 countries across 11 domains to perform 66 HTTP transactions. The main domain is ira.empower-retirement.com and was registered NaN years ago.

Submitted URL: https://es.ira.empower-retirement.com

Effective URL: https://ira.empower-retirement.com/participant/#/loginRedirected

The Cisco Umbrella rank of the primary domain is #27,360 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

2
Risk Score

Legitimate Empower IRA login page; no significant security concerns.

Risk Factors
Hidden password field not visible in screenshot
Safety Factors
Well‑established domain (>11 years)
Official brand subdomain (ira.empower-retirement.com)
No malicious Indicators of Compromise
Cisco Umbrella top‑100 k ranking
Standard login form expected for financial service
Domain age information unavailable

Details

Page Title

User login | Empower IRA, Investing  and Life Insurance – Empower Investing

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

The domain name 'es.ira.empower-retirement.com' uses the commercial generic top-level domain (.com) and includes subdomain 'es.ira'. The second-level label 'empower-retirement' is 18 characters long with seven vowels and 10 consonants, along with 1 hyphen. Word splitting yields 2 words: empower, retirement. Average segment length settles at 8.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://es.ira.empower-retirement.com

Page Load Overview

5.49s
Total Load Time
76
HTTP Requests
14
Domains
696 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:7,243 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13216.58.206.40United States
AS15169GOOGLE
7104.18.86.42Germany
72.23.246.74Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
7104.18.41.242United States
AS13335CLOUDFLARENET
7104.18.32.137Germany
734.160.81.0Kansas City, Missouri, United States
AS396982GOOGLE-CLOUD-PLATFORM
7104.18.94.41United States
AS13335CLOUDFLARENET
73.233.158.112GermanyUnknown
718.66.137.67GermanyUnknown
713.32.121.46GermanyUnknown
7610--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T192F3725B39A4231AE6D3C719AAA27A8878219C4FFD335CEDF14D53744BCC7E28C1560A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:6Gt7gHtAEgZitPgzl818sQ5SaAZv/FYb82xgb50isA7N2OsK0wga2x/Q1LH/JD/M:bgH/4zKZZFYb82uMO/ACLHC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:161115:KAhVOBeGqAkSTwFLwKMIgBIScIoAZrYAZgoCzFBiTFCXAQLSAT3HAAAhmIhIgI0rQYkSKAAgxVFQjuAqGEBb4J4MhIIHEQM1

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bc1c0000df8387ff
Perceptual Hash:9e0eda99c9656625
Difference Hash:71292e2e132f2e39
Wavelet Hash:bc1c0080cbc7c7ff
Color Hash:#1f9348

Scan History

Scan history not available

Unable to load historical scan data