ScanMalware.com

Security Scan Report: medidata.thoughtspot.cloud

Redirected to:
https://identity.login-authenticate.cloud/
Site favicon
Submitted: Sep 14, 2026, 10:34:31 PMCompleted: Sep 14, 2026, 10:35:05 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b7a9634f-8c32-42b9-a37e-ac8201ceb13eDomain and IP registration (RDAP)/api/v1/rdap/b7a9634f-8c32-42b9-a37e-ac8201ceb13eCertificate Transparency/api/v1/ct/identity.login-authenticate.cloudHow often this domain was scanned/api/v1/domain/stats/medidata.thoughtspot.cloudScan history for this domain/api/v1/domain/history/medidata.thoughtspot.cloud?limit=15

This website contacted 11 IPs in 1 country across 8 domains to perform 107 HTTP transactions. The main domain is identity.login-authenticate.cloud and was registered 20 years ago.

Submitted URL: https://medidata.thoughtspot.cloud

Effective URL:

https://identity.login-authenticate.cloud/
Redirected

The Cisco Umbrella rank of the primary domain is #79,285 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 68%

5
Risk Score

Branded 'ThoughtSpot Login' page with a username/password form served on the unrelated domain login-authenticate.cloud, with the password field hidden in the DOM — a credential-phishing shape; verify the official domain before entering credentials.

Risk Factors
Brand-named login page (ThoughtSpot) hosted on a non-ThoughtSpot registrable domain
Password field present in HTML but hidden from the visible page
Cross-domain redirect from thoughtspot.cloud to login-authenticate.cloud
Safety Factors
No Indicators of Compromise, YARA malware, IDS alerts, or Safe Browsing hits
Cross-origin form action flagged as an SSO-style flow rather than JS credential exfiltration
No payment fields and no disguised (unicode) password fields detected
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 5
Domain age information unavailable

Details

Page Title

ThoughtSpot Login

Scan Type

public

Domain Name Analysis

Within the .cloud top-level domain, 'medidata.thoughtspot.cloud' is registered and includes subdomain 'medidata'. The core label 'thoughtspot' covers 11 characters split between three vowels and 8 consonants. Tokenizing the label suggests 2 words: thought, spot. Average segment length settles at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://medidata.thoughtspot.cloud

Page Load Overview

9.21s
Total Load Time
4.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:68%
Script:Latin
Direction:ltr

Detection Details

Text Length:141 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism49% confidence
Type: webapp
Method: ml+structural

All Detected Categories

news media journalism
49%
government public service
46%
social media network
46%
healthcare medical
46%
adult content
40%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1754.166.75.186Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
965.9.130.83Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
965.9.130.92Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
965.9.130.72Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
9151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
935.169.225.37Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
9104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
965.9.130.46Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
93.233.210.175Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
965.9.130.120Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
10711--

Detected Technologies8

PasswordField
100%
JQueryv3.6.0
100%
Cloudflare
50%
Amazon Web Services
50%
HSTS
40%
Amazon S3
40%
jQuery CDN
20%
cdnjs
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13B23B51904F3116355533FADFFDBA615B26A80471041CC25BBBC67A82FC2E7942B2B9E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:q5Uu7yy6ONnDfwAq2wGiAzRV2JWZUeazAU0he5e/cICNz9rLIQSVDQfjmjYCrh5n:qBnkWzRV2JWZUeazAU0he5e/cICNTCrj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:47900:ASgBIAMAYAjBTF6JnJCigIikoJUsQCzC8oskeMAiASCVCHEKvQ4IEFBslIEAIEgIMgKICNRjgQJQAkVCEZCwgoisEDkJRQUR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:8de136b39918d876
Difference Hash:9a46b2b2b2b26d6c
Wavelet Hash:46f35a1818ff1197
Color Hash:#8987c5

Other Hashes

Crop Resistant:9e8eb8b033338086,9a46b2b2b2b26d6c

Scan History

Scan history not available

Unable to load historical scan data