Security Scan Report: zn394yygoj0zd35dd-cbs.siteintercept.qualtrics.com

Redirected to:
https://zn394yygoj0zd35dd-cbs.siteintercept.qualtrics.com/login
Submitted: Apr 18, 2026, 7:42:18 PMCompleted: Apr 18, 2026, 7:43:31 PMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is zn394yygoj0zd35dd-cbs.siteintercept.qualtrics.com and was registered NaN years ago.

Submitted URL: https://zn394yygoj0zd35dd-cbs.siteintercept.qualtrics.com

Effective URL: https://zn394yygoj0zd35dd-cbs.siteintercept.qualtrics.com/loginRedirected

The Cisco Umbrella rank of the primary domain is #821 of the top 1 million websitesTop 1K Site

AI Security Verdict

Moderate Risk

Confidence: 85%

5
Risk Score

The site mimics a Qualtrics login page, uses disguised password fields and Unicode evasion, indicating credential phishing despite a reputable domain.

Risk Factors
Brand impersonation (Qualtrics)
Disguised password field
Password field without username
Unicode evasion in form inputs
High JavaScript obfuscation and eval usage
Safety Factors
Domain age > 25 years (well‑established)
Cisco Umbrella ranking 821 (top 1 K)
No malicious Indicators of Compromise detected
No JavaScript YARA malware matches
No network IDS alerts
Established domain (9515 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Bot Protection Detected

This website is protected by access_denied bot protection. Our scanner was challenged or blocked during access.

Page Title

zn394yygoj0zd35dd-cbs.siteintercept.qualtrics.com

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(66%)

Domain Information

Within the commercial generic top-level domain (.com), 'zn394yygoj0zd35dd-cbs.siteintercept.qualtrics.com' is registered with subdomain 'zn394yygoj0zd35dd-cbs.siteintercept'. The second-level label 'qualtrics' is 9 characters long with 3 vowels and six consonants. Splitting it apart reveals 4 words: qu, alt, ric, s. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://zn394yygoj0zd35dd-cbs.siteintercept.qualtrics.com

Page Load Overview

4.77s
Total Load Time
85
HTTP Requests
14
Domains
827 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:3,488 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software66% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
66%
corporate business
62%
documentation technical
59%
government public service
50%
cryptocurrency blockchain
42%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
85104.17.209.240United States
AS13335Cloudflare, Inc.
851--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15C048F77329A063986558498F05B43099F20B143F506C9BCB9BCBAD9BFDED06107BB78

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:MfQho9PKBb9Js3q9Jzbs6tlg3SBKwdQWgceIszc2bMy8Oldo:vhoC9JSqzzbs6o3Sj3gcrso2eAe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:184636:EWjijVHFAmgGQpLGAKACKCIFAIbWhEb0GwkgMKjzlAAEkti3iMkoIoIcHT+AGSEBHBCM0DAFECLA5B8zigHQBIQknCBAA3Bc

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc7c7ffffffff
Perceptual Hash:b333cccccc233333
Difference Hash:00180c1c00000000
Wavelet Hash:ffdfc3c700000000
Color Hash:#87c58d

Other Hashes

Crop Resistant:00180c1c00000000

Scan History

Scan history not available

Unable to load historical scan data