Security Scan Report: omniroute.sirok.space

Redirected to:
https://omniroute.sirok.space/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 42 HTTP transactions. The main domain is sirok.space and was registered 2 years 10 months ago.

Submitted URL: https://omniroute.sirok.space

Effective URL:
https://omniroute.sirok.space/login
Redirected

AI Security Verdict

Low Risk

Confidence: 68%

3
Risk Score

Self-branded AI gateway login on an established domain. No impersonation, threat-intel, or exfiltration signals. Password-only login with a visible default password is a security weakness, not clear phishing.

Risk Factors (3)
Password-only login form without a username field is an unusual credential-entry pattern
Page displays a default password hint, indicating weak or default access control
Domain is unranked in Cisco Umbrella and has limited legitimacy signals
Safety Factors (5)
Site displays its own brand OmniRoute matching its subdomain, not another entity's brand
No brand impersonation of OpenAI, Anthropic, Google, or any other third party
No cross-origin credential submission or JavaScript credential exfiltration detected
No threat-intelligence, hunting rule, IDS, or Safe Browsing malicious indicators
Established domain age reduces the likelihood of a disposable phishing host
Domain age information unavailable

Details

Page Title

OmniRoute — AI Gateway for Multi-Provider LLMs

Scan Type

public

Domain Name Analysis

The domain name 'omniroute.sirok.space' uses the .space top-level domain; it also runs on subdomain 'omniroute'. Its registrable label 'sirok' stretches across 5 characters with 2 vowels and 3 consonants. Tokenizing the label suggests 2 words: sir, ok. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

OmniRoute Enter your password to continue Password ord to continue CHANGEME (unless INITIAL_PA Continue Forgot password? Unified Al API Proxy Route requests to multiple Al providers through a...

Page Load Overview

4.08s
Total Load Time
4.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:522 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software56% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
56%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4285.192.49.58Helsinki, Uusimaa, Finland
AS215730H2nexus Cloud Services - Fzco
421--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ADF4E62FB609D51EC9860F9F7BBE5E726A6D810806411078B6EDC13D814A87CBFB71D2

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:XuCuvO0zlqSgYCPFTrpmRkUjYxj3EGYeXEJLRM+qQ2dbV4RJuyuWGcgyZYPLx0PC:pzwTeXEucGcgyZYlMDkw929

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:754971:hREuERHGDgrNiLBIHFVxga0TMlYADYCCnDBAg4oa9DiqkBlLkAJElNRIVMJARgiRQCRKACwFDgtDHDIiwBwMmAFAkRCo+kFW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f1f3b1f19b9bffff
Perceptual Hash:ed43c23c94c31f3c
Difference Hash:258463433232c526
Wavelet Hash:f0f0b0b09293f1f3
Color Hash:N/A

Other Hashes

Crop Resistant:258463433232c526

Scan History

Scan history not available

Unable to load historical scan data