corporate business

technology software

social_media

English

bm_sz

BrowserId

_abck

OptanonConsent

LSKey-c$CookieConsentPolicy

sfdcConsent

CookieConsentPolicy

Within the commercial generic top-level domain (.com), 'axalta--axtp.sandbox.lightning.force.com' is registered; it also runs on subdomain 'axalta--axtp.sandbox.lightning'. The second-level label 'force' is 5 characters long holding 2 vowels versus 3 consonants. Segmentation suggests 1 word: force. No strong language cues emerged from the frequency lists.

width

height

hasRememberUn

startURL

loginURL

loginType

useSecure

local

locale

oauth_token

oauth_callback

login

serverid

display

username

ExtraLog

Login

rememberUn

mydomain

html/00/a1/00a15f69-8468-48ba-a33c-5a4ecd42c41c_nodriver.html.gz

upgrade-insecure-requests
frame-ancestors 'none'

default-src 'self'; script-src 'self' *.salesforce.com 'report-sample'; style-src 'unsafe-inline' 'self' *.file.force.com *.salesforce.com *.visualforce.com:*; img-src *.force.com slack-mil-dev.com slack-imgs-mil-dev.com 'self' *.slack.com *.amazonaws.com blob: *.slack-imgs.com slack-imgs-gov.com *.slack-edge.mil *.salesforce-experience.com slack-imgs.com slack-gov-dev.com *.sfdcstatic.com *.slack-edge-gov.com *.salesforce.com *.twimg.com *.my-salesforce.com slack-imgs-gov-dev.com *.slack-edge.com slack-imgs.mil *.cloudinary.com data:; media-src 'self' *.salesforce.com; frame-src *.force.com *.quip.com *.arkoselabs.com 'self' *.youtube-nocookie.com *.youtube.co.uk *.cybersource.com *.youtube.com.br *.youtube.es *.salesforce-experience.com *.salesforceliveagent.com *.adis.ws *.sfdcfc.net *.youtube.ca *.youtube.ie *.cloudinary.com *.vidyard.com *.vimeo.com *.youtube.jp bcove.video *.youtube.fr *.forceusercontent.com *.youtube.com *.brightcove.net *.wistia.net *.salesforce.com *.youtube.nl *.youtube.pl; font-src *.force.com 'self' *.salesforce.com blob: data:; connect-src 'self' *.amazonaws.com *.salesforce.com api.salesforce.com *.api.salesforce.com wss://*.slack.com; report-to sfdc-csp-ep; report-uri https://csp-report.force.com/_/ContentDomainCSPNoAuth?type=mydomain

marketing

Marketing

sessionserver

575e02abf95b2eac6488e56b661bd126140df98f96381e4156eacd97c76354a2

4225aba4c887e33defc911208e303a26ab70de97b137cf1e6de65d084d2a2c26

61034b287415c72e964b9c36b22ae42014875e0ad58cf5890f894eeb01cbb2df

c475e0a19cc5e519f61841f29b5edd9842fee82e34e91c338e02df89589a3ae1

73f9e62599202c81dea54a9448af6f96f07177807f358ca43cf3533581e88b6f

e9bcfe3afd2e8f3d30686f9b65b059b564e681174496d3d431c4b31089135290

189f242883a88d98ed5da5366f6518a62c537a9883395ab484753c3f0b49652e

51c7fa0719e80398c74a788208999a9e92398a740e4850ea456e2ada18fe4879

eaec104e525cedae7ce83f2574abe9bfec35148ac738c8764fd6f4ceb20e71f4

viewport

Salesforce Customer Secure Login Page. Login to your Salesforce Customer Account.

description

format-detection

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

Login | Salesforce

if (self == top) {document.documentElement.style.visibility = 'visible';} else {document.write = ''; top.location = self.location; setTimeout(function(){document.body.innerHTML='';}, 1);window.self.onload=function(evt){document.body.innerHTML='';};}

var SFDCSessionVars={"server":"https:\/\/test.salesforce.com\/login\/sessionserver212.html","im":true,"ah":"active","save":"Save","saveOne":"Save 1 Change","sum":"#p# Saved Usernames","iaac":false,"hac":"Choose a Username","suo":"1 Saved Username","title":" | Salesforce","saveMany":"Save #p# Changes","lpt":"Login","lllbl":"Lightning Login","host":"test.salesforce.com","le":false,"heu":"Edit Username List","ic":false,"lh":false,"ur":"https:\/\/axalta--axtp.sandbox.my.salesforce.com","hidp":"Log In Using","ih":"inactive","dc":"Username removed. Click Save to Commit Changes."};

function handleLogin(){document.login.un.value=document.login.username.value;document.login.width.value=screen.width;document.login.height.value=screen.height;document.getElementById("Login").disabled=true;document.getElementById("login_form").submit();}function lazyload(){document.getElementById("pwcapsicon").src="/img/icon/capslock_blue.png";document.getElementById("marketing").src="https://c.salesforce.com/login-messages/promos.html";}loader();

PasswordField

✅ Low Risk - https://axalta--axtp.sandbox.lightning.force.com

Requests	IP Address	Location	AS Autonomous System
3	35.158.127.51	Frankfurt am Main, Hesse, Germany	AS16509AMAZON-02
3	160.8.184.0	London, England, United Kingdom	AS14340SALESFORCE
3	160.8.239.0	London, England, United Kingdom	AS14340SALESFORCE
3	35.158.127.53	Frankfurt am Main, Hesse, Germany	AS16509AMAZON-02
3	23.36.162.222	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
15	5	-	-

Security Scan Report: axalta--axtp.sandbox.lightning.force.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History