Security Report: znbidgqk1lw69f1fu-bmocx.siteintercept.qualtrics.com - Analysis

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is znbidgqk1lw69f1fu-bmocx.siteintercept.qualtrics.com and was registered NaN years ago.

Submitted URL: https://znbidgqk1lw69f1fu-bmocx.siteintercept.qualtrics.com

Effective URL: https://znbidgqk1lw69f1fu-bmocx.siteintercept.qualtrics.com/loginRedirected

The Cisco Umbrella rank of the primary domain is #821 of the top 1 million websitesTop 1K Site

AI Security Verdict

Moderate Risk

Confidence: 78%

Risk Score

Phishing login page impersonating Qualtrics, using hidden password fields and heavy JS obfuscation to harvest credentials.

Risk Factors

Credential harvesting pattern (password-only form)

Obfuscated JavaScript with eval() and Function() usage

Unicode mixing in form fields to evade detection

Multiple redirects (1) to final login URL

Absence of username/email input field

Safety Factors

Domain age > 25 years (well‑established)

Cisco Umbrella ranking 821 (top 1 K)

No Indicators of Compromise matches

No malicious YARA signatures detected

No network IDS alerts

Established domain (9559 days old) with no strong malicious indicators — risk clamped from 8 to 5

Domain age information unavailable

Details

Bot Protection Detected

This website is protected by access_denied bot protection. Our scanner was challenged or blocked during access.

Page Title

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Screenshot

Page Load Overview

3.45s

Total Load Time

HTTP Requests

Domains

918 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:en-US

Text Length:3,488 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software66% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

66%

corporate business

62%

documentation technical

59%

government public service

50%

cryptocurrency blockchain

42%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
87	104.17.208.240	United States	AS13335Cloudflare, Inc.
87	1	-	-

Detected Technologies8

X-UA-Compatible

100%

reCAPTCHA

45%

HSTS

40%

Cloudflare Bot Management

40%

40%

30%

20%

20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BC930A61E5402C1702874A9570661F0E7ABBC16AC70F8C5936FC839C2FEFD5DAA5A2F1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:TsFuPpx1Uu1vQlpBUCCPkZxAtVHWddhrhBODSRTe+/MF4WrtYvk:TJ1vQlokZ+t1WddhrhBODSRS+I

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:96055:awEBAIAAIInhNiHimECBCDcGwJSVJEU8C+iqIWgC2mBwBkbAA5AwCDBA3YFANpSAgEhlhhiqBHSTAAEAoUICy23SBDENAgBu

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc3c7ffffffff

Perceptual Hash:b333cccccc233333

Difference Hash:00180c1c00000000

Wavelet Hash:3010000400000000

Color Hash:#783a67

Other Hashes

Crop Resistant:00180c1c00000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: znbidgqk1lw69f1fu-bmocx.siteintercept.qualtrics.com