Security Scan Report: www.spark.co.nz

Redirected to:
https://signin.spark.co.nz/?goto=https://www.spark.co.nz/xtramail/chec...
Site favicon
Submitted: May 15, 2026, 10:28:03 PMCompleted: May 15, 2026, 10:29:41 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 2 countries across 3 domains to perform 20 HTTP transactions. The main domain is signin.spark.co.nz.

Submitted URL: https://www.spark.co.nz/cwa/openam/SSORedirect/metaAlias/Xtramail/idp1?SAMLRequest=hZJvb9MwEMa%2FSuT3idNszYrVVgrJJlUaMLVsQrxBxr1pFv6H77IMPj12Cqi8Ga8s3d2je36Pb43SmiC6kZ7cHr6PgFS8WONQzI0NG6MTXqJG4aQFFKTEoXt3K5qqFiF68sobdiZ5XSERIZL2jhW7YcO%2BdG%2F662boLq76RVc3q5vL9vK6XbbL1VXdt8PFW1Y8QMQ0v2FJnkSII%2BwcknSUSnXTlvWyXCw%2FNo1oVqJefGbFkBi0kzSrnogCCs6naaowyPitUr5yP7maJPcBkkN%2BOHzYw1FHUMQtkOyMlsg%2FUZRWasP1MSxY0XuHkHe%2BRqdOQ0KNMaa31DYYrTSx4sZHBXPIG%2FYoDUJGuUtp6Gf4W%2Bn%2BhJOXjRbiAeKzVnC%2Fvz0Dga%2FZVvWS%2FP1msWCMdzx4pD1gyCbYdp0%2FQ8x5xa0MAUdNUOZiSVNc8%2FP2%2BnQE7xPQbrjzyfOP7NjK%2F%2FDmij6Wj%2FOoSIYc6sSdSJKhqY8gKdFRHIHx7Wnlv6e2%2FQU%3D&RelayState=https%3A%2F%2Fwebmail.xtra.co.nz%2Findex.cgi&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=RS9vve3q2R%2BEyB4xcGoLRhUHkNCknrYGmYAjTZ6uJWXr5b9vu5GQJL0oNXoPsruHMy6SBvwqY%2BLx0500itA46kYb3ufN7%2BvwakvbwZFdAROBIcVFiB2E8Cn%2FV6RetpSUe6dSBeqNeQ%2FvDvFev49HEyvaBpe2wyfr2%2FELnmdeU2DL6WYFSQg8nHU3y3sU47tIDHKJ4EW5zY0LUU87cyznTzkKmCxrV6KG8197vTB49xzfL1Ycu8cGNuRAz%2F7Y0uyksyeUh41pwSyfc89cZ9YeKlI2EPD1OPbQXr%2BpZ4jRjo4ymBNfEZ6EhcxWJaBn17qG3HPSoCq3xneKNeNVh6ZcPQ%3D%3D

Effective URL: https://signin.spark.co.nz/?goto=https://www.spark.co.nz/xtramail/checkcookies?spEntityID%3Dappsuite-saml-twr%26goto%3Dhttp://openam.internal.spark.co.nz:8080/openam/saml2/continue/metaAlias/Xtramail/idp1?secondVisitUrl%253D/SSORedirect/metaAlias/Xtramail/idp1?ReqID%25253D_A9CE2DA37C1A028F464E6565870C6D3B%26AMAuthCookie%3D&brand=xtramailRedirected

The Cisco Umbrella rank of the primary domain is #416,869 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 82%

3
Risk Score

Legitimate Spark login page with a credential form; minor technical warnings but no malicious indicators.

Risk Factors
JS Obfuscation Score flagged as CRITICAL (high entropy, heavy concatenation)
Suricata reported 13 CRITICAL and 7 HIGH informational alerts
Safety Factors
Domain belongs to established Spark New Zealand brand
Form posts to signin.spark.co.nz (same organization)
Presence of hCaptcha and privacy/legal pages
No external credential exfiltration observed
Domain age information unavailable

Details

Page Title

Sign in

Scan Type

public

Language

🇺🇸

English

(54% confidence)

Category

healthcare medical

(29%)

Domain Information

You're looking at domain 'www.spark.co.nz' on the New Zealand country-code top-level domain (.co.nz) with subdomain 'www'. The registrable portion 'spark' spans 5 characters split between one vowel and four consonants. Breaking it apart gives one word: spark. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.spark.co.nz/cwa/openam/SSORedirect/metaAlias/Xtramail/idp1?SAMLRequest=hZJvb9MwEMa%2FSuT3idNszYrVVgrJJlUaMLVsQrxBxr1pFv6H77IMPj12Cqi8Ga8s3d2je36Pb43SmiC6kZ7cHr6PgFS8WONQzI0NG6MTXqJG4aQFFKTEoXt3K5qqFiF68sobdiZ5XSERIZL2jhW7YcO%2BdG%2F662boLq76RVc3q5vL9vK6XbbL1VXdt8PFW1Y8QMQ0v2FJnkSII%2BwcknSUSnXTlvWyXCw%2FNo1oVqJefGbFkBi0kzSrnogCCs6naaowyPitUr5yP7maJPcBkkN%2BOHzYw1FHUMQtkOyMlsg%2FUZRWasP1MSxY0XuHkHe%2BRqdOQ0KNMaa31DYYrTSx4sZHBXPIG%2FYoDUJGuUtp6Gf4W%2Bn%2BhJOXjRbiAeKzVnC%2Fvz0Dga%2FZVvWS%2FP1msWCMdzx4pD1gyCbYdp0%2FQ8x5xa0MAUdNUOZiSVNc8%2FP2%2BnQE7xPQbrjzyfOP7NjK%2F%2FDmij6Wj%2FOoSIYc6sSdSJKhqY8gKdFRHIHx7Wnlv6e2%2FQU%3D&RelayState=https%3A%2F%2Fwebmail.xtra.co.nz%2Findex.cgi&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=RS9vve3q2R%2BEyB4xcGoLRhUHkNCknrYGmYAjTZ6uJWXr5b9vu5GQJL0oNXoPsruHMy6SBvwqY%2BLx0500itA46kYb3ufN7%2BvwakvbwZFdAROBIcVFiB2E8Cn%2FV6RetpSUe6dSBeqNeQ%2FvDvFev49HEyvaBpe2wyfr2%2FELnmdeU2DL6WYFSQg8nHU3y3sU47tIDHKJ4EW5zY0LUU87cyznTzkKmCxrV6KG8197vTB49xzfL1Ycu8cGNuRAz%2F7Y0uyksyeUh41pwSyfc89cZ9YeKlI2EPD1OPbQXr%2BpZ4jRjo4ymBNfEZ6EhcxWJaBn17qG3HPSoCq3xneKNeNVh6ZcPQ%3D%3D

Page Load Overview

5.68s
Total Load Time
20
HTTP Requests
3
Domains
164 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:54%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:54%
Script Type:Latin
Text Length:187 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical29% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
29%
technology software
27%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
866.22.91.1Auckland, Auckland, New Zealand
AS48851Radware Ltd
634.160.81.0Kansas City, Missouri, United States
AS396982Google LLC
666.22.91.48Auckland, Auckland, New Zealand
AS48851Radware Ltd
203--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11B63C7DA1530A24815CFE54EDF6FEEC8105B605BE8A2D5C1BAEE8B0C5B8BED4FD41844

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:uN80gO/fvJfAwkrNKZoBz7qawqh0QKoZCktWnBo2rTbFDqJuK/v5qwqI7nOolP3:uz/VIBr7qa1ZI42rZ40HI7nOolf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:70628:QgAzOBwCaDWCFYAQK61REEBEGrJ0IVGgA8LiXQEAA4imMEKEANXlk3A9pEDGkqJFhRSAqIKYwaAEZlAQFdAqjCsAgVZSoQCo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1018181818180000
Perceptual Hash:8dc877227626dc27
Difference Hash:b2b2b2b2b3b34326
Wavelet Hash:18181819191b83c7
Color Hash:#e0e06c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data