ScanMalware.com

Security Scan Report: 1f4afd22-2de5-4524-8ccf-1be4ba27898a.iad.login.instructure.com

Submitted: Jun 24, 2026, 2:10:00 AMCompleted: Jun 24, 2026, 2:11:23 AMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is 1f4afd22-2de5-4524-8ccf-1be4ba27898a.iad.login.instructure.com and was registered NaN years ago.

Submitted URL: https://1f4afd22-2de5-4524-8ccf-1be4ba27898a.iad.login.instructure.com

The Cisco Umbrella rank of the primary domain is #994 of the top 1 million websitesTop 1K Site

AI Security Verdict

Moderate Risk

Confidence: 82%

4
Risk Score

The site appears legitimate with no credential or payment forms; only moderate risk due to heavy JS obfuscation.

Risk Factors
Critical JavaScript obfuscation (base64, unescape, charcode manipulation)
Machine‑learning classifier shows 44% phishing probability
Safety Factors
Well‑established domain (registered 1998) with strong reputation
Self‑branding (login.instructure.com) matches the official brand
No external malicious links or network‑level alerts
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 4
Domain age information unavailable

Details

Page Title

Log in to Canvas

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

news media journalism

(45%)

Domain Information

The domain '1f4afd22-2de5-4524-8ccf-1be4ba27898a.iad.login.instructure.com' uses the commercial generic top-level domain (.com) and includes subdomain '1f4afd22-2de5-4524-8ccf-1be4ba27898a.iad.login'. The second-level label 'instructure' is 11 characters long split between 4 vowels and 7 consonants. Splitting it apart reveals two words: in, structure. Average segment length settles at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://1f4afd22-2de5-4524-8ccf-1be4ba27898a.iad.login.instructure.com

Page Load Overview

1.48s
Total Load Time
12
HTTP Requests
2
Domains
69 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:80 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism45% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism
45%
phishing scam
44%
social media network
39%
healthcare medical
37%
documentation technical
36%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1218.173.205.22United States
AS16509Amazon.com, Inc.
121--

Detected Technologies3

Amazon Web Services
50%
Amazon S3
40%
Amazon CloudFront
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F8212305E061502B16AA37FD5ED67E44E1E2F54ECB24A980B0AF297C01FCD6768B7934

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:K04NcVGIG51R0qTKWHsVgS4x0hIdYuGsFs9kJCYSNjZ8kL7YMAST6Wj:f4z0qTJV08Y3sFsqoYE2kvYMASTz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1140:AAAQAQAAAAAACAAAAAEAAGAEAEAgAAAABABgAAAAAAAAAAAACAAAIAAAAAAAAAAIQAAAKgAAAAAAAAAAAAAAAEAAAAEAAABA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7ffffffff
Perceptual Hash:e666669999999989
Difference Hash:0c4d0d0c00000000
Wavelet Hash:272727270f0f0f0f
Color Hash:#536bac

Other Hashes

Crop Resistant:0c4d0d0c00000000

Scan History

Scan history not available

Unable to load historical scan data