ScanMalware.com

Security Scan Report: a1096-346164225.cluster74.canvas-user-content.com

Redirected to: https://b2b0c970-8c97-44e8-bc56-a029b47c90c1.iad.login.instructure.com/?goto=https%3A%2F%2Fb2b0c970-8c97-44e8-bc56-a029b47c90c1.iad.login.instructure.com%2Fam%2Foauth2%2Falpha%2Fauthorize%3Fauthentication_provider%3D79175795-479a-4154-8335-43264065b1fb%26client_id%3Dcanvas-prod-iad%26nonce%3D9043bd2f32a6e6b65e71b89e25b364f6b1dffed686e7bcc5%26org_id%3Db2b0c970-8c97-44e8-bc56-a029b47c90c1%26redirect_uri%3Dhttps%3A%2F%2Fsso.canvaslms.com%2Flogin%2Foauth2%2Fcallback%26response_type%3Dcode%26scope%3Dopenid%2520profile%26state%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhYWNfaWQiOjcwMDAwMDAwMDAxNzUyLCJub25jZSI6IjkwNDNiZDJmMzJhNmU2YjY1ZTcxYjg5ZTI1YjM2NGY2YjFkZmZlZDY4NmU3YmNjNSIsImhvc3QiOiJjYW52YXMuaW5zdHJ1Y3R1cmUuY29tIiwidGFyZ2V0X2F1dGhfcHJvdmlkZXIiOiI3OTE3NTc5NS00NzlhLTQxNTQtODMzNS00MzI2NDA2NWIxZmIiLCJleHAiOjE3NjYyMzk2MjN9.PGUmYho4f8onaBL9uPz9WPCP7HShzrbWSAOzLQ3mvZk%26target_domain%3Dhttps%3A%2F%2Fcanvas.instructure.com&realm=/alpha

Submitted: Dec 20, 2025, 1:56:58 PMCompleted: Dec 20, 2025, 1:57:22 PMpubliccompleted
Loading additional data...

Summary

This website contacted 9 IPs in 1 country across 4 domains to perform 25 HTTP transactions. The main domain is b2b0c970-8c97-44e8-bc56-a029b47c90c1.iad.login.instructure.com and was registered NaN years ago.

Submitted URL: https://a1096-346164225.cluster74.canvas-user-content.com

Effective URL: https://b2b0c970-8c97-44e8-bc56-a029b47c90c1.iad.login.instructure.com/?goto=https%3A%2F%2Fb2b0c970-8c97-44e8-bc56-a029b47c90c1.iad.login.instructure.com%2Fam%2Foauth2%2Falpha%2Fauthorize%3Fauthentication_provider%3D79175795-479a-4154-8335-43264065b1fb%26client_id%3Dcanvas-prod-iad%26nonce%3D9043bd2f32a6e6b65e71b89e25b364f6b1dffed686e7bcc5%26org_id%3Db2b0c970-8c97-44e8-bc56-a029b47c90c1%26redirect_uri%3Dhttps%3A%2F%2Fsso.canvaslms.com%2Flogin%2Foauth2%2Fcallback%26response_type%3Dcode%26scope%3Dopenid%2520profile%26state%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhYWNfaWQiOjcwMDAwMDAwMDAxNzUyLCJub25jZSI6IjkwNDNiZDJmMzJhNmU2YjY1ZTcxYjg5ZTI1YjM2NGY2YjFkZmZlZDY4NmU3YmNjNSIsImhvc3QiOiJjYW52YXMuaW5zdHJ1Y3R1cmUuY29tIiwidGFyZ2V0X2F1dGhfcHJvdmlkZXIiOiI3OTE3NTc5NS00NzlhLTQxNTQtODMzNS00MzI2NDA2NWIxZmIiLCJleHAiOjE3NjYyMzk2MjN9.PGUmYho4f8onaBL9uPz9WPCP7HShzrbWSAOzLQ3mvZk%26target_domain%3Dhttps%3A%2F%2Fcanvas.instructure.com&realm=/alphaRedirected

The Cisco Umbrella rank of the primary domain is #2,693 of the top 1 million websitesTop 10K Site

AI Security Verdict

Safe Website

Confidence: 95%

2
Risk Score

Legitimate Canvas login page; minor concerns about redirects but no phishing indicators.

Risk Factors
Password field without username (potential credential harvesting pattern)
Excessive number of redirects (7) before reaching final login page
Safety Factors
Final URL is the official Instructure login domain
Domain is long‑standing and highly ranked
No malicious Indicators of Compromise detected
Domain age information unavailable

Details

Page Title

Log in to Canvas

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(88%)

Domain Information

Domain 'a1096-346164225.cluster74.canvas-user-content.com' uses the commercial generic top-level domain (.com), featuring subdomain 'a1096-346164225.cluster74'. The second-level label 'canvas-user-content' is 19 characters long containing 6 vowels alongside eleven consonants; bonus characters include 2 hyphens. Splitting it apart reveals three words: canvas, user, content. The median word length lands at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://a1096-346164225.cluster74.canvas-user-content.com

Page Load Overview

3.65s
Total Load Time
25
HTTP Requests
4
Domains
104 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:328 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software88% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
88%
social media network
77%
education learning
49%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
944.199.223.163Ashburn, Virginia, United States
AS14618AMAZON-AES
23.164.68.63United States
AS16509AMAZON-02
23.164.68.90United States
AS16509AMAZON-02
23.164.68.73United States
AS16509AMAZON-02
23.164.68.52United States
AS16509AMAZON-02
252.20.106.75Ashburn, Virginia, United States
AS14618AMAZON-AES
244.199.237.51Ashburn, Virginia, United States
AS14618AMAZON-AES
244.192.142.193Ashburn, Virginia, United States
AS14618AMAZON-AES
23.237.140.200Ashburn, Virginia, United States
AS14618AMAZON-AES
259--

Detected Technologies2

PasswordField
100%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17E92925952B237BB187A70DE41C35E1970A2F45FDE81B8F0D0ED4E6A02BAC3E34A3556

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:7/qV6ebJsOpN8HlkyoaeviKFQKJ8al6JomQ9pUJ3BJFJl+WCpJFJE1Qh/CrFmY1j:c1sOpN8HlkyoMKFQKJ8al6JomQ9pU3D7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19849:ZlABkCMA8kohCwFAoEjA8CgAqQaLBYBcMFECEYUVDEBJoCY4HCgY3NAQ9gMkORQGJeQXBYNhBsWAAUBFIKQVahbAgELRgOMR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00307e7e7e7e7e
Perceptual Hash:802f2faf9190c5af
Difference Hash:d005e4d8dcf4f4d4
Wavelet Hash:7f00007c7c7c7c7c
Color Hash:#6ce07f

Other Hashes

Crop Resistant:d005e4d8dcf4f4d4,d02c3c3022322282,0bd0c0dcf4d4f4d4

Scan History

Scan history not available

Unable to load historical scan data