Security Scan Report: sso-test.scania-dcs.com

Redirected to: https://login.microsoftonline.com/3bc062e4-ac9d-4c17-b4dd-3aad637ff1ac/saml2?SAMLRequest=nVLJbtswEP0VgXdqX1LCduDGKGogaY3Y7aGXYkRSDgEuCofM8vdV5BpNDsmh1%2BGbN2%2Fh4vLJ6ORBelTOLkmR5uRytUAwemTrGO7srbyPEkMywSyy%2BWFJorfMASpkFoxEFjjbr2%2BuWZnmbPQuOO40SbabJfmd876%2BuGjLoW%2B7rq6h4m1Dkp%2Fng9PGBESMcmsxgA3TKC9bmpe07A5Fy6qS5U2aN80vkuz%2BUn9WVih7%2FFhHfwIh%2B3o47Oju%2B%2F5Aks3kRFkI8%2Bm7EEZkWabdUdnUKO4duiE4q5WVKXcmq3qet6WsKfBPgta86GhfC0ErANFW3TAUwLOXSEqSrBGlfyG%2BchajkX4v%2FYPi8sft9b9TiI6GSQMdpAjaN6K6p%2FIxhdRHm8I4zmQZORXA5lj8q%2BQ%2FNgxnBWQFx55CnKw480wjhEX2ivBc77eJYbvZOa348%2F%2FU%2B8V5A%2BF9dJEW80QJOsxQJg0ovRbCS8QpMa3d45WXEOSSBB8lyVYnoW%2B%2F3uoP&sso_reload=true

Site favicon
Submitted: Feb 27, 2026, 4:31:59 PMCompleted: Feb 27, 2026, 4:33:17 PMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 3 countries across 5 domains to perform 1 HTTP transaction. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: http://sso-test.scania-dcs.com/

Effective URL: https://login.microsoftonline.com/3bc062e4-ac9d-4c17-b4dd-3aad637ff1ac/saml2?SAMLRequest=nVLJbtswEP0VgXdqX1LCduDGKGogaY3Y7aGXYkRSDgEuCofM8vdV5BpNDsmh1%2BGbN2%2Fh4vLJ6ORBelTOLkmR5uRytUAwemTrGO7srbyPEkMywSyy%2BWFJorfMASpkFoxEFjjbr2%2BuWZnmbPQuOO40SbabJfmd876%2BuGjLoW%2B7rq6h4m1Dkp%2Fng9PGBESMcmsxgA3TKC9bmpe07A5Fy6qS5U2aN80vkuz%2BUn9WVih7%2FFhHfwIh%2B3o47Oju%2B%2F5Aks3kRFkI8%2Bm7EEZkWabdUdnUKO4duiE4q5WVKXcmq3qet6WsKfBPgta86GhfC0ErANFW3TAUwLOXSEqSrBGlfyG%2BchajkX4v%2FYPi8sft9b9TiI6GSQMdpAjaN6K6p%2FIxhdRHm8I4zmQZORXA5lj8q%2BQ%2FNgxnBWQFx55CnKw480wjhEX2ivBc77eJYbvZOa348%2F%2FU%2B8V5A%2BF9dJEW80QJOsxQJg0ovRbCS8QpMa3d45WXEOSSBB8lyVYnoW%2B%2F3uoP&sso_reload=trueRedirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Phishing page impersonating Scania login to harvest credentials.

Risk Factors
Credential harvesting login form
Cross‑origin credential submission to external domain
Brand impersonation on a non‑official, unranked domain
Subdomain mimicking an authentication service (sso-test)
Misspelled brand text indicating social engineering
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

The domain 'sso-test.scania-dcs.com' uses the commercial generic top-level domain (.com) and includes subdomain 'sso-test'. The core label 'scania-dcs' covers 10 characters split between three vowels and six consonants; bonus characters include one hyphen. Splitting it apart reveals three words: scania, dc, s. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://sso-test.scania-dcs.com/

Page Load Overview

3.55s
Total Load Time
19
HTTP Requests
6
Domains
445 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:194 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
740.126.32.133Sweden
3142.251.141.83France
313.107.246.44United States
323.207.210.137UnknownUnknown
320.190.160.67UnknownUnknown
195--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T103735CDA7FB3193B828681B6B5B66E02AE365907884CCDA4F15CCC842FFA70D8137557

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:lM8GLGG2+A80X2oIyEk77gx2xpTvPoMmCftErvRizHC:i8V+A8q2J32RAUHC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:77476:5k2JsQMDksoxBpIogwaUCEoCSRAShCmMBpBQMGUYHQAIAsoAyAAACQFbgAgz4MDYQVSUyw4iQu+TOkQGAASVYoEkUAYPgBHU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00103878d8180000
Perceptual Hash:d88d277bc80399d9
Difference Hash:54b4f0b0b03068a9
Wavelet Hash:08f0fc7cfcf83818
Color Hash:#d27e79

Scan History

Scan history not available

Unable to load historical scan data