Security Scan Report: frederick-health.recondohealth.net

Redirected to:
https://login.zirmed.com/ui/Login/?urlredirect=https%3A%2F%2Ffrederick...
Site favicon
Submitted: Jul 20, 2026, 1:17:25 AMCompleted: Jul 20, 2026, 1:18:36 AMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is login.zirmed.com and was registered NaN years ago.

Submitted URL: https://frederick-health.recondohealth.net

Effective URL: https://login.zirmed.com/ui/Login/?urlredirect=https%3A%2F%2Ffrederick-health.recondohealth.netRedirected

The Cisco Umbrella rank of the primary domain is #150,154 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 80%

3
Risk Score

High‑risk site impersonating Waystar and harvesting credentials via a cross‑origin login form.

Risk Factors
Brand impersonation with credential form
Cross‑origin form submission to unrelated domain
Low Cisco Umbrella ranking for claimed brand
Safety Factors
Top-ranked domain (Cisco Umbrella #150,154, 9952 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 8 to 3
Domain age information unavailable

Details

Page Title

Revenue Cycle Management Solutions | Waystar

Scan Type

public

Language

🇺🇸

English

(43% confidence)

Category

healthcare medical

(33%)

Domain Information

The domain 'frederick-health.recondohealth.net' uses the network infrastructure generic top-level domain (.net) with subdomain 'frederick-health'. The registrable portion 'recondohealth' spans 13 characters split between five vowels and eight consonants. Word splitting yields three words: recon, do, health. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://frederick-health.recondohealth.net

Page Load Overview

3.23s
Total Load Time
25
HTTP Requests
8
Domains
349 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:43%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:43%
Script Type:Latin
Text Length:342 chars
Detector Agreement:50%

Website Classification

Primary Category

healthcare medical33% confidence
Type: webapp
Method: ml+structural

All Detected Categories

healthcare medical
33%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25216.241.103.181Aurora, Colorado, United States
AS13649Flexential Colorado Corp.
251--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12981B70118FC842A2222C0D2FDF2BA2F9D9ED1178314DD94BB6C46689FE5AD78D5782D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:apdnkSBzVsoRRqHzgVJYAtMbeMEDLavWCrELtn:a3n5ZzRXYAtyECeCgn

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4179:BCgIIACBEAAQkIBDACAgQwFMAQygAMCEgAgRgAAACgMSAJnIAICCABIWAiFIAQgEFkgwAEQABAgAAEIAAKEAICABhQBAYIYA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c0f0ccfe170f8f87
Perceptual Hash:b46163366639387e
Difference Hash:8cc290b4643c3e2e
Wavelet Hash:c0f8cc7e170f0f07
Color Hash:#d0d22d

Other Hashes

Crop Resistant:8cc290b4643c3e2e

Scan History

Scan history not available

Unable to load historical scan data