Security Scan Report: philips-prod.planoncloud.com

Redirected to:
https://login.microsoftonline.com/1a407a2d-7675-4d17-8692-b3ac285306e4...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 4 countries across 6 domains to perform 27 HTTP transactions. The main domain is planoncloud.com and was registered 13 years ago.

Submitted URL: https://philips-prod.planoncloud.com

Effective URL:
https://login.microsoftonline.com/1a407a2d-7675-4d17-8692-b3ac285306e4...
Redirected

The Cisco Umbrella rank of the primary domain is #203,769 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Legitimate SAML SSO redirect from a Planon cloud subdomain to Microsoft's official login endpoint; no credential forms, brand impersonation, or threat-intel hits.

Safety Factors (4)
SAML authentication redirect to Microsoft's official login endpoint
No credential or payment collection fields on the scanned page
No Indicators of Compromise or malware/IDS hits
Page is consistent with a legitimate Planon cloud SSO flow
Domain age information unavailable

Details

Page Title

Sign in to planon

Scan Type

public

Domain Name Analysis

The domain name 'philips-prod.planoncloud.com' uses the commercial generic top-level domain (.com), featuring subdomain 'philips-prod'. The core label 'planoncloud' covers 11 characters holding 4 vowels versus 7 consonants. Word splitting yields three words: plan, on, cloud. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://philips-prod.planoncloud.com

Page Load Overview

0.62s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:29%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:English
Text Length:240 chars
Detector Agreement:50%
Language mismatch: Declared as English but detected as en

Website Classification

Primary Category

social media network59% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
59%
phishing scam
53%
finance banking
47%
e-commerce shopping
30%
technology software
27%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
363.179.168.59Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
240.126.31.129Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
240.126.31.131Office365 · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
223.53.42.120Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
213.107.246.44Azure · CLOUDUnited States
AS8075Microsoft Corporation
220.50.73.5Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
218.153.114.116Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
23.123.96.160Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
240.126.31.1Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
220.190.159.75Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
2713--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C7C174A4C8F1147E26638289BDA4B6484F82550B840B5D55B17D0F7ECFE2E89C4EF8E5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:4I9xZ6T/Xj2Adr2drodrDwdrzjLpNsP6oD2qxDvbQs2v:f9xZ6T/z2AUiBw9jLpOPDvbQrv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5605:EKhAFoErhALIABIAALAQgjBQgBQgCXBQBkQAQAAAABSIKAqBEQAFMISgCCAQaGYAAQQzD4gADiEQwQQCR0gl0AFkAABhKQRh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data