Security Scan Report: harley-davidson.us10.sapanalytics.cloud

Redirected to:
https://login.microsoftonline.com/d72bf766-eac5-473f-8170-2e4f4954c317...
Site favicon
Submitted: Jul 7, 2026, 9:48:53 PMCompleted: Jul 7, 2026, 9:50:07 PMpubliccompleted
Loading additional data...

Summary

This website contacted 11 IPs in 4 countries across 7 domains to perform 38 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://harley-davidson.us10.sapanalytics.cloud

Effective URL: https://login.microsoftonline.com/d72bf766-eac5-473f-8170-2e4f4954c317/saml2?SAMLRequest=fZJbb9pAEIX%2FirXv6xs2hhUmokVRkdKGgNOHvo33ElayZ6lnTZt%2FX2NIk6pKJD%2Btz5xvdM4sbn63TXDSHVmHJUvCmAUapVMWn0r2WN3yGbtZLgjaJj2KVe8PuNM%2Fe00%2BGAaRxOVPyfoOhQOyJBBaTcJLsV99vRNpGItj57yTrmHBikh3fkB9dkh9q7u97k5W6sfdXckO3h9JRNEBukY%2FcwUnq8hhCANVo7cSzpNhT0kcHgAhdKh0C6hC6drovEi0399H0Fig%2F01%2BEW%2FsSbNgPSxvcfR6ZTbuyWLYWtk5csY7bCzq0VcVaW2K6ZRrkDnPionhs6SIeaozk83zTE6SYoSnLLh1ndRjSCUz0NBA26xLtto9GGnUbA7cGJA8m8wMr3VqOMwTVdfTaa5UPmhpC0TDkq%2FTRL3eIHlAX7I0Tqc8LoavShORzURehHmc%2FWDB9prwJ4uX5j6qo76ISHypqi3f3u8rFnx%2FuYBBwK59i5HevS36Y2N4aZct34t%2FEb21%2FntY3wavzXrrGiufzym24N9HJWEyvljFzSgVPdJRS2usVixaXhn%2FnuvyDw%3D%3D&RelayState=28b8ec21-21d3-4044-8be9-8f8970b30603&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=vQymzxPyPObtvj5wpgFF7ilamN6YOCR0Zb1cGInDZhymNu%2BIxJyoY0bFwGSmbCzlYG%2FxukiqhkFSxHBn4LqCnhd7D2WBjXW7XlmHv2TnzQZMswMetFpAi40ytH1t%2FwbEwD%2BZSc7gMzHvAIkwy855TX2PW%2BIV917W61N3bX%2FPpQZhBQ7msdcdOoP7idYk5SuRe%2B2joaUdaMWyCtWkbuAH%2Fs0gPD3NwuvSYRW9KowSG7Md4YGdg8VhHSKPtVaVrv9uWFC5uJ5ZVyUsjazuuL8Gf%2FStGFntgYArCI1Ahemf4dOZ%2BqpangA3OUoI9IR1UHAmFQdf9Md8%2BRREfo5J5UdgBRkolV9jBl3iAQfztC7xtU2VgPF7X16fwjN9ZGXGIZViig19RekGOV3OYe6s09dhnOo%2F73LXZMageeGf5yw3f1PpBK7CUmk5JSwls7ryFcOwPXf7oDGVZ2RkjFHZK0fNJvCVHQAeLXFe0coXIYIf1B1jz4ZQEq0f6Rfor%2BLvRv5Zc2dlkaTKnGFFpJ0pKez%2FvYTt13vuHEx1atxlDAiakou0U3j0IsymE3X53Lf%2FItiGjoswJsf%2BfClCpQlOmxKaL2i%2BvRwvds3xTimQqA4RvQLQfocOzKYfnrGZWw7QmBIPVVkMGyUrdiPQuehZRjws%2B8IYKiJrcs0%2BCHfjPWlHGxo%3D&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #61,997 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 85%

2
Risk Score

The site impersonates Harley‑Davidson and harvests credentials via a Microsoft SSO login form, indicating a high‑risk phishing attempt.

Risk Factors
Brand impersonation of Harley‑Davidson
Credential collection on non‑official domain
Obfuscation score marked CRITICAL (high entropy/minification)
Function() constructor calls (code generation) in JavaScript
Safety Factors
Form posts to legitimate Microsoft login endpoint
No network‑level IDS alerts or known malicious kits
Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 8 to 2
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

Within the .cloud top-level domain, 'harley-davidson.us10.sapanalytics.cloud' is registered; it also runs on subdomain 'harley-davidson.us10'. The second-level label 'sapanalytics' is 12 characters long containing four vowels alongside 8 consonants. Tokenizing the label suggests two words: sap, analytics. Median word length is 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://harley-davidson.us10.sapanalytics.cloud

Page Load Overview

2.33s
Total Load Time
38
HTTP Requests
7
Domains
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:109 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
820.190.159.73Office365 · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
334.205.56.51Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
340.126.31.0Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
323.200.24.97Berlin, State of Berlin, Germany
AS20940Akamai International B.V.
313.107.246.44Azure · CLOUDUnited States
AS8075Microsoft Corporation
340.126.31.67Office365 · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
323.200.24.107Berlin, State of Berlin, Germany
AS20940Akamai International B.V.
320.190.159.75Office365 · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
320.190.160.2Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
318.213.242.208Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
3811--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T177835BD57EA21937828B55B5B4BA7E02AA7A68078D4CDC60F15CCC842FFB35D8137A13

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Dw8GLG2mEjHSg7owIZ9Tjuokmap5vPoMLuBw0RatiPUC:08Zoyg7Ua/A+C

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:80942:iKbpiQGWHATwoLGCsGiAYckSEiIgegAAgIQaxotQBEgJMEeQkrkUESFmjZKZBINaYAoRYIAQIQDB2RcHKD8M4EYzDWfRAMmi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c0c0f8f8f8380010
Perceptual Hash:cdf13233d98189cd
Difference Hash:9c8cb2b23272e5a3
Wavelet Hash:e0c0f8f8f8b8f0f0
Color Hash:#68ac53

Scan History

Scan history not available

Unable to load historical scan data