Security Scan: ECCO

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/16a532c1-e8e0-4546-a761-bcceccf6f723 Domain and IP registration (RDAP)/api/v1/rdap/16a532c1-e8e0-4546-a761-bcceccf6f723How often this domain was scanned/api/v1/domain/stats/ecco.service-now.com Scan history for this domain/api/v1/domain/history/ecco.service-now.com?limit=15

This website contacted 12 IPs in 4 countries across 8 domains to perform 45 HTTP transactions. The main domain is service-now.com and was registered 25 years ago.

Submitted URL: https://ecco.service-now.com

Effective URL:

https://login.microsoftonline.com/06152121-b4c5-4544-abf5-9268e75db448...

Redirected

The Cisco Umbrella rank of the primary domain is #2,165 of the top 1 million websitesTop 10K Site

AI Security Verdict

Safe Website

Confidence: 88%

Risk Score

Standard SAML SSO redirect from a ServiceNow tenant to Microsoft's real login domain; no credential harvesting, impersonation, or threat-intel hits. Legitimate.

Safety Factors (5)

Destination is the official Microsoft login domain (login.microsoftonline.com), not a lookalike

SAML 2.0 federation flow between a corporate ServiceNow tenant and Microsoft Entra ID is a normal enterprise configuration

No credential or payment fields harvested on the captured page

No Indicators of Compromise, malware, or phishing signals in any scanner feed

Scanner-vs-client content mismatch is attributable to ordinary bot protection on the identity provider, not evasion

Domain age information unavailable

Details

Page Title

ECCO

Scan Type

public

Favicon Hash

MMH3: -367643081

MD5: d9e8d1a438000f70952e6a84240a354a

Domain Name Analysis

Domain 'ecco.service-now.com' uses the commercial generic top-level domain (.com) and includes subdomain 'ecco'. Its registrable label 'service-now' stretches across 11 characters with four vowels and 6 consonants; bonus characters include 1 hyphen. Splitting it apart reveals 2 words: service, now. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.94s

Total Load Time

1.6 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:48 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical73% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

healthcare medical

73%

social media network

56%

finance banking

39%

e-commerce shopping

36%

technology software

32%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	148.139.8.75	Dublin, Leinster, Ireland	AS16839SERVICENOW, INC.
3	20.190.160.4Office365 · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
3	40.126.31.1Office365 · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
3	13.107.246.44Azure · CLOUD	United States	AS8075Microsoft Corporation
3	23.207.210.132Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	20.190.159.130Office365 · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
3	4.207.44.64Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
3	40.126.32.74Office365 · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
3	40.126.32.68Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
3	20.190.160.3Office365 · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
45	12	-	-