Security Scan: Login

Summary

This website contacted 3 IPs in 1 country across 4 domains to perform 14 HTTP transactions. The main domain is cisco.login.duosecurity.com and was registered NaN years ago.

Submitted URL: https://cisco.alationcloud.com

Effective URL: https://cisco.login.duosecurity.com/email_first?authkey=ASON4AZHA4ID0VL76J5K&scid=fe76b74b9836441b8e24c92d41fae87e&req-trace-group=1df1e4b582345e070972a65fRedirected

The Cisco Umbrella rank of the primary domain is #185,547 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 92%

Risk Score

The site impersonates Cisco login on an unrelated, low‑rank domain and triggers critical malware IDS alerts, indicating high risk of phishing or malware.

Risk Factors

Brand impersonation of Cisco on unrelated domain

Critical and high severity IDS alerts indicating possible malware activity

Low Cisco Umbrella ranking for a brand‑claiming domain

Multiple redirects that obscure the true destination

Absence of legitimate authentication mechanisms

Safety Factors

Domain age 5747 days (well‑established)

No JavaScript malware YARA matches

JS obfuscation score low (standard minified code)

No credential or payment forms present

No cross‑origin credential exfiltration detected

Page served from an identity-provider sign-in endpoint (cisco.login.duosecurity.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 8 to 2

Domain age information unavailable

Details

Page Title

Scan Type

public

Language

🇺🇸

English

(71% confidence)

Screenshot

Page Load Overview

5.62s

Total Load Time

HTTP Requests

Domains

41 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:71%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:71%

Script Type:Latin

Text Length:54 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism37% confidence

Type: static

Method: ml+structural

All Detected Categories

news media journalism

37%

e-commerce shopping

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	52.2.100.0	United States	AS14618
4	52.223.1.163	United States	AS16509Amazon.com, Inc.
4	18.66.102.5	United States	Unknown
14	3	-	-

Detected Technologies3

HSTS

40%

Envoy

40%

jQuery

20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11B81C823F464543FC90B89EAE061AB9DD0C7C754CB4797C5B6DD82AE8BC99F4291318C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:1HCY+NZfBb+npHEMdEN1htzdg+gBtbz8CAiOT:QY+NZfBqEMS1XZhCAiW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3989:AAqACFAAQAUAIQAAQEEgCgAAFAQiKAAAABmJAEgC0EIAoEAEAAAAAsAlFAEAJACEAgAQoAAJAgA0AAGogAAIgCIIgICjQRAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000

Perceptual Hash:993366cc99339966

Difference Hash:100c123232320800

Wavelet Hash:0c0c3c3cfcfcf0f0

Color Hash:#931f4a

Other Hashes

Crop Resistant:100c123232320800

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: cisco.alationcloud.com