Security Scan Report: www.spark.co.nz

Redirected to:
https://signin.spark.co.nz/?goto=https://www.spark.co.nz/xtramail/chec...
Site favicon
Submitted: May 21, 2026, 7:54:37 AMCompleted: May 21, 2026, 7:56:30 AMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 2 countries across 3 domains to perform 20 HTTP transactions. The main domain is signin.spark.co.nz.

Submitted URL: https://www.spark.co.nz/cwa/openam/SSORedirect/metaAlias/Xtramail/idp1?SAMLRequest=hZLdbhMxEIVfZeX7XW%2B2WZpYSaRN0kiRClQJIMRN5TpT1ar%2F8Mx2C0%2BPvQEUbopvLM3M0Zzv2AuU1gTR9fTkDvC9B6Ti1RqHYmwsWR%2Bd8BI1CictoCAljt37W9FUtQjRk1fesAvJ2wqJCJG0d6zYb5fsfj6%2FWk%2FT6Wa75qbtpvPdrrluZ5v1pp40s%2B2aFV8gYppfsiRPIsQe9g5JOkqlunlX1m3ZTD7V16Kdiqv2Gyu2iUE7SaPqiSig4HwYhgqDjM%2BV8pX7ydUguQ%2BQHPLj8eMBTjqCIm6BZGe0RP6VorRSG65PYcKKjXcIeedbdOo8JFQfY7pLbYPRShMrdj4qGENeskdpEDLKXUpDv8DfSvcnnLystxCPEF%2B0gs%2BH2wsQeMi2qtfk7zeLBWO848EjHQBDNsFWi%2FwYYswrrmQI2GuCMhdLGuKCX7YX50%2FwIQHtt3c%2Bef6RHVv5H95c0afycRwVyZBDnbgTSTI0bCJISnQUe2B8dV7571db%2FQI%3D&RelayState=https%3A%2F%2Fwebmail.xtra.co.nz%2Findex.cgi&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=hXHWU0SjnS6CfhFSmwCXXzz75LgUyvQKcrAJBl6kwRyS%2B8RZQYMu6yBAke44kTZx6kjHCb8OkUck6PdeHjCvi6Estcah0josS3BoZXIRmjRsYutFacN3RykMZ7ZYg7mSq9xBzxdZpOAHiMvBsJfaA9GZ0EeGkh1EWhMvRK15AnuSle06OLj5dw3oEEFoldpcXPLzOOR5kgTllgqI5gDgXqHk2vTe6TwcnyU2YEbIwhFZgT0uGK%2F68%2BDpNPn23Hd1LnLXZv6kKzEEFRhe9SiARRHH1NYh%2FhUb9YWcWYPOfxJM%2FgPYo57X0Oq3DIhSNxQBFKpF%2BRPwTF%2F0w4WHgq8kFQ%3D%3D

Effective URL: https://signin.spark.co.nz/?goto=https://www.spark.co.nz/xtramail/checkcookies?spEntityID%3Dappsuite-saml-twr%26goto%3Dhttp://openam.internal.spark.co.nz:8080/openam/saml2/continue/metaAlias/Xtramail/idp1?secondVisitUrl%253D/SSORedirect/metaAlias/Xtramail/idp1?ReqID%25253D_993B4444A8F2E5A49FF2758CBC0128DB%26AMAuthCookie%3D&brand=xtramailRedirected

The Cisco Umbrella rank of the primary domain is #416,869 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

High risk due to unknown domain age and brand login form; possible phishing attempt.

Risk Factors
Low domain ranking for a major brand
Domain age unknown (treated as potentially new)
Credential collection form on brand‑claimed page
Domain age information unavailable

Details

Page Title

Sign in

Scan Type

public

Language

🇺🇸

English

(54% confidence)

Category

healthcare medical

(29%)

Domain Information

Domain 'www.spark.co.nz' uses the New Zealand country-code top-level domain (.co.nz) and includes subdomain 'www'. The second-level label 'spark' is 5 characters long containing one vowel alongside four consonants. Word splitting yields one word: spark. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.spark.co.nz/cwa/openam/SSORedirect/metaAlias/Xtramail/idp1?SAMLRequest=hZLdbhMxEIVfZeX7XW%2B2WZpYSaRN0kiRClQJIMRN5TpT1ar%2F8Mx2C0%2BPvQEUbopvLM3M0Zzv2AuU1gTR9fTkDvC9B6Ti1RqHYmwsWR%2Bd8BI1CictoCAljt37W9FUtQjRk1fesAvJ2wqJCJG0d6zYb5fsfj6%2FWk%2FT6Wa75qbtpvPdrrluZ5v1pp40s%2B2aFV8gYppfsiRPIsQe9g5JOkqlunlX1m3ZTD7V16Kdiqv2Gyu2iUE7SaPqiSig4HwYhgqDjM%2BV8pX7ydUguQ%2BQHPLj8eMBTjqCIm6BZGe0RP6VorRSG65PYcKKjXcIeedbdOo8JFQfY7pLbYPRShMrdj4qGENeskdpEDLKXUpDv8DfSvcnnLystxCPEF%2B0gs%2BH2wsQeMi2qtfk7zeLBWO848EjHQBDNsFWi%2FwYYswrrmQI2GuCMhdLGuKCX7YX50%2FwIQHtt3c%2Bef6RHVv5H95c0afycRwVyZBDnbgTSTI0bCJISnQUe2B8dV7571db%2FQI%3D&RelayState=https%3A%2F%2Fwebmail.xtra.co.nz%2Findex.cgi&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=hXHWU0SjnS6CfhFSmwCXXzz75LgUyvQKcrAJBl6kwRyS%2B8RZQYMu6yBAke44kTZx6kjHCb8OkUck6PdeHjCvi6Estcah0josS3BoZXIRmjRsYutFacN3RykMZ7ZYg7mSq9xBzxdZpOAHiMvBsJfaA9GZ0EeGkh1EWhMvRK15AnuSle06OLj5dw3oEEFoldpcXPLzOOR5kgTllgqI5gDgXqHk2vTe6TwcnyU2YEbIwhFZgT0uGK%2F68%2BDpNPn23Hd1LnLXZv6kKzEEFRhe9SiARRHH1NYh%2FhUb9YWcWYPOfxJM%2FgPYo57X0Oq3DIhSNxQBFKpF%2BRPwTF%2F0w4WHgq8kFQ%3D%3D

Page Load Overview

18.53s
Total Load Time
20
HTTP Requests
3
Domains
164 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:54%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:54%
Script Type:Latin
Text Length:187 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical29% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
29%
technology software
27%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
866.22.91.48Auckland, Auckland, New Zealand
AS48851Radware Ltd
634.160.81.0Kansas City, Missouri, United States
AS396982Google LLC
666.22.91.1Auckland, Auckland, New Zealand
AS48851Radware Ltd
203--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11C53C7CA1570A24815CEE54EDF6FEEC8101B606BE9B3D5C57AEE8B0C4B8BAD4FD41844

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:kDgO/fvJfTck9NKZoBz7qawqh0QKoZCktWnBo2rTbFDqJuKyv5qwqlKTplP3:kx/Vn7r7qa1ZI42rZL0HlKTplf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:66503:IAAQY+Q6IYswwEDIIGgzgwIcVhBMAeQEBh+mBSAKoQBCKAUUC0DmDAEi7DtJ2GBICchDFKC2QUEgocbtYUI0IcABkcWIblAF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1018181818180000
Perceptual Hash:8dc877227626dc27
Difference Hash:b2b2b2b2b3b34326
Wavelet Hash:18181819191b83c7
Color Hash:#53ac85

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data