Security Scan Report: walgreens.syf.com

Redirected to:
https://walgreens.syf.com/accounts/login/?token=eyJlbmMiOiJBMjU2Q0JDLU...
Site favicon
Submitted: Jul 11, 2026, 8:42:47 PMCompleted: Jul 11, 2026, 8:44:09 PMpubliccompleted

This website contacted 36 IPs in 3 countries across 31 domains to perform 256 HTTP transactions. The main domain is walgreens.syf.com and was registered 30 years ago.

Submitted URL: https://walgreens.syf.com

Effective URL:

https://walgreens.syf.com/accounts/login/?token=eyJlbmMiOiJBMjU2Q0JDLU...
Redirected

The Cisco Umbrella rank of the primary domain is #23,869 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 88%

3
Risk Score

Phishing page harvesting Walgreens credentials on an unrelated domain; treat as high‑risk credential phishing.

Risk Factors (3)
Brand impersonation with credential collection
Login form on a domain that is not the brand's official domain
Obfuscated JavaScript with extensive eval() usage
Safety Factors (4)
Established domain age (30+ years)
Physical address and legal information present
No IDS or known IoC alerts
Top-ranked domain (Cisco Umbrella #23,869, 11069 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 8 to 3
Domain age information unavailable

Details

Page Title

Manage Your Walgreens Credit Card Account

Scan Type

public

Domain Name Analysis

You're looking at domain 'walgreens.syf.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'walgreens'. Count 3 characters in 'syf' split between zero vowels and three consonants. Word splitting yields one word: syf. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://walgreens.syf.com

Page Load Overview

6.32s
Total Load Time
5.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:936 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking25% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1118.66.122.33Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
72.23.244.185Frankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
72.23.7.26Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
7130.211.33.132Google · CDNKansas City, Missouri, United States
AS396982Google LLC
72.23.246.168Frankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
765.8.131.99Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
734.246.109.238Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
7104.16.151.240Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
713.35.58.129Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
7162.247.243.39United States
AS54113Fastly, Inc.
25636--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T174534C575FA12116412F1AC1B3E6BBAC723DA6079F878C9EF2EC1198AB45EDC30D1349

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Qs88BaLYNf2FOk9iiYcJZP+aX1Q8QxQ1d76zd:788eYNf2ImiizJZP+AKbuHup

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:66592:Ea0gQEAowcBYygqYQYTQhRjhUMWIgSnQg0SEggBAKCQW4FAixlhjAYGIQEBJEBogMwBUIIC8RgNOQYCAcAKIsYSPEYIQgQlx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff8f0f0c8f8f4fc
Perceptual Hash:d4a89f91a9c6aeb0
Difference Hash:309025e590006400
Wavelet Hash:dfc0f0f048f0f0f8
Color Hash:#b7c587

Scan History

Scan history not available

Unable to load historical scan data