The domain name 'a1096-345504880.cluster74.canvas-user-content.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'a1096-345504880.cluster74'. The second-level label 'canvas-user-content' is 19 characters long containing 6 vowels alongside eleven consonants, along with two hyphens. Word splitting yields 3 words: canvas, user, content. Average segment length settles at six characters. No strong language cues emerged from the frequency lists.

html/f6/97/f697252f-0fb9-4973-9d8b-8547a5f3d74c.html.gz

frame-ancestors 'self' canvas.instructure.com canvas.staging.instructure.com canvas.beta.instructure.com canvas.test.instructure.com oauth.instructure.com oauth.staging.instructure.com oauth.beta.instructure.com oauth.test.instructure.com localhost instructure.com staging.instructure.com beta.instructure.com test.instructure.com stats.instructure.com stats.staging.instructure.com stats.beta.instructure.com stats.test.instructure.com cluster7.instructure.com cluster7.staging.instructure.com cluster7.beta.instructure.com cluster7.test.instructure.com cluster7.iad.canvas-user-content.com cluster7.iad.staging.canvas-user-content.com cluster7.iad.beta.canvas-user-content.com cluster7.iad.test.canvas-user-content.com;

frame-ancestors 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Log in to Canvas

⚡ Medium Risk - https://a1096-345504880.cluster74.canvas-user-content.com/

Requests	IP Address	Location	AS Autonomous System
4	54.88.128.129	Ashburn, Virginia, United States	AS14618AMAZON-AES
2	18.233.110.251	Ashburn, Virginia, United States	AS14618AMAZON-AES
2	18.173.205.81	United States	AS16509AMAZON-02
2	52.73.184.151	Ashburn, Virginia, United States	AS14618AMAZON-AES
2	54.209.159.28	Ashburn, Virginia, United States	AS14618AMAZON-AES
2	3.94.188.212	Ashburn, Virginia, United States	AS14618AMAZON-AES
2	18.173.205.102	United States	AS16509AMAZON-02
2	52.203.71.134	Ashburn, Virginia, United States	AS14618AMAZON-AES
18	8	-	-

Security Scan Report: a1096-345504880.cluster74.canvas-user-content.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History