ScanMalware.com

Security Scan Report: ogqnn52mnuowjvptahzdagg.us20.analytics.cloud.sap

Redirected to: https://aa029qcbh.accounts.ondemand.com/saml2/idp/sso/aa029qcbh.accounts.ondemand.com?SAMLRequest=rVJRb5swGPwryO8Y4kKWWCFVtqhapG5FhfZhb1%2BNA47gM%2BEz2dZfX0LStVPV7mWv9vnufHeLy19N7R10R8ZiwiY8ZJ5GZQuDZcLu8it%2Fxi6XC4KmFq1c9a7CW73vNTlveIgkTzcJ6zuUFsiQRGg0Sadktvp2LQUPZdtZZ5Wtmbci0p0bpL5YpL7RXaa7g1H67vY6YZVzLckgsOUeMRYN9vbn7tA6qB4LKEsOg7pGZxQcGXhPIuQVIHCLhW4AC65sExwNBVl2E0BtgN4ne%2Bw77R85mLcevmNwZH1xARCK%2BV49VByUsj06eqsjAlO0AZH9F5p5V7ZTeswvYVuoSTNvs04YxLuLcqfMhYmiOAxFBLNo92lrdDzVMxgwlAKROeiXV0S93iA5QJcwEYqpHwpfRPlESDGXk5hH0%2FkP5qXn0D8bPJX5UUMPJxDJr3me%2BulNljPv%2FnkUA4CdJyBH9e519x8Tw3PhbPlf6l0Er338Geb3QXizTm1t1O9j1A24931N%2BGQ8MYW%2FHaGyR2q1MkPsBQuWZ42%2F5758Ag%3D%3D&RelayState=cloudfoundry-uaa-sp&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=CNJU%2FYuZ6u2dID9hErhdQ9Jp7x503hsBT9gL1GTuUTd47AUBMvmhzt7RiJG184aqG%2ByL%2BRIRpA%2BOBN%2B33PIQDU6spFT4hJCwKrGOzx0F2WDM6gvsIkJoCoVxJY2%2BZXIctJMY0mRf72dbmHDvAA2H%2F6Wju0V9GfoVwcrx6ZR0DFuIEjeDMS6iXpk7dY7aRwid%2BIKgjuxi07e1PVkBwj6UgD0646bpDnxdTCDX%2BxQEbEM9QxRcQLwXfTVejapBmFs1lTZaRKq7gbNLgBpvqmREyzu8JpvW39cuhvs4jzFmhP3wyZFJxhQlM1ZD41s9%2FXwGqrZQNgts1qRXkNmKk3zNlA%3D%3D

Submitted: Feb 24, 2026, 12:29:10 PMCompleted: Feb 24, 2026, 12:30:23 PMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 3 domains to perform 21 HTTP transactions. The main domain is aa029qcbh.accounts.ondemand.com and was registered NaN years ago.

Submitted URL: https://ogqnn52mnuowjvptahzdagg.us20.analytics.cloud.sap

Effective URL: https://aa029qcbh.accounts.ondemand.com/saml2/idp/sso/aa029qcbh.accounts.ondemand.com?SAMLRequest=rVJRb5swGPwryO8Y4kKWWCFVtqhapG5FhfZhb1%2BNA47gM%2BEz2dZfX0LStVPV7mWv9vnufHeLy19N7R10R8ZiwiY8ZJ5GZQuDZcLu8it%2Fxi6XC4KmFq1c9a7CW73vNTlveIgkTzcJ6zuUFsiQRGg0Sadktvp2LQUPZdtZZ5Wtmbci0p0bpL5YpL7RXaa7g1H67vY6YZVzLckgsOUeMRYN9vbn7tA6qB4LKEsOg7pGZxQcGXhPIuQVIHCLhW4AC65sExwNBVl2E0BtgN4ne%2Bw77R85mLcevmNwZH1xARCK%2BV49VByUsj06eqsjAlO0AZH9F5p5V7ZTeswvYVuoSTNvs04YxLuLcqfMhYmiOAxFBLNo92lrdDzVMxgwlAKROeiXV0S93iA5QJcwEYqpHwpfRPlESDGXk5hH0%2FkP5qXn0D8bPJX5UUMPJxDJr3me%2BulNljPv%2FnkUA4CdJyBH9e519x8Tw3PhbPlf6l0Er338Geb3QXizTm1t1O9j1A24931N%2BGQ8MYW%2FHaGyR2q1MkPsBQuWZ42%2F5758Ag%3D%3D&RelayState=cloudfoundry-uaa-sp&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=CNJU%2FYuZ6u2dID9hErhdQ9Jp7x503hsBT9gL1GTuUTd47AUBMvmhzt7RiJG184aqG%2ByL%2BRIRpA%2BOBN%2B33PIQDU6spFT4hJCwKrGOzx0F2WDM6gvsIkJoCoVxJY2%2BZXIctJMY0mRf72dbmHDvAA2H%2F6Wju0V9GfoVwcrx6ZR0DFuIEjeDMS6iXpk7dY7aRwid%2BIKgjuxi07e1PVkBwj6UgD0646bpDnxdTCDX%2BxQEbEM9QxRcQLwXfTVejapBmFs1lTZaRKq7gbNLgBpvqmREyzu8JpvW39cuhvs4jzFmhP3wyZFJxhQlM1ZD41s9%2FXwGqrZQNgts1qRXkNmKk3zNlA%3D%3DRedirected

The Cisco Umbrella rank of the primary domain is #7,803 of the top 1 million websitesTop 10K Site

AI Security Verdict

Safe Website

Confidence: 96%

0
Risk Score

Legitimate SAML login page for SAP analytics; no security concerns detected.

Safety Factors
Established corporate domain (analytics.cloud.sap)
Legitimate SAP SAML IdP (accounts.ondemand.com)
Only one login form with email/username and password fields
Low JavaScript obfuscation score (normal minification)
No phishing or credential‑exfiltration behavior observed
Domain age information unavailable

Details

Page Title

SF Analytics - ibmcorpP2: Sign In

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

corporate business

(58%)

Domain Information

Within the .sap top-level domain, 'ogqnn52mnuowjvptahzdagg.us20.analytics.cloud.sap' is registered and includes subdomain 'ogqnn52mnuowjvptahzdagg.us20.analytics'. The second-level label 'cloud' is 5 characters long split between 2 vowels and 3 consonants. It segments into one word: cloud. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ogqnn52mnuowjvptahzdagg.us20.analytics.cloud.sap

Page Load Overview

5.63s
Total Load Time
18
HTTP Requests
3
Domains
733 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:94 chars
Detector Agreement:75%

Website Classification

Primary Category

corporate business58% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
58%
technology software
55%
cryptocurrency blockchain
44%
government public service
40%
news media journalism
28%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9157.133.166.69United States
AS35039SAP SE
940.91.120.100United States
AS8075Microsoft Corporation
182--

Detected Technologies1

HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11672D734D424AC3754036AAC28D6EF0DAA5E9119DA1188647C7CCBC81F97E26453ABFF

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:oeDCjs0ha+V0DaCm7ehJZk88aJibo8OvB0Tg5hB6rstT6jbFlEvyL:o+CqWzQFkwvmT66rstTebFlEvyL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16612:stRYgAIEsASiwEFC6FkFpSEYCVEBCAwCi05ZMQgQkcCgEElBJQoQEQihFbgMCJGjO6KyMChChGQpEoAFa2AYYAGjhsSzAEpB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1008181818180200
Perceptual Hash:cc9966cc93669966
Difference Hash:201012123232040c
Wavelet Hash:030b1b0bdbdbc3c3
Color Hash:#87c58f

Other Hashes

Crop Resistant:201012123232040c

Scan History

Scan history not available

Unable to load historical scan data