Security Scan: Sign in to your account

Summary

This website contacted 5 IPs in 3 countries across 5 domains to perform 2 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://newtongroup.lightning.force.com

Effective URL: https://login.microsoftonline.com/a1ca3800-92e9-4942-a1e0-1f14988b2ce1/saml2?SAMLRequest=jZPbbqMwEIZfBfmeBBy6AVRScQg5tCXkrHATOa4JbsEm2DQkT1%2BUtlJ3L6odaS6sGf%2B%2Fx%2Frm%2FqEpcuWdVIJy5gC9owGFMMxfKDs6YL0KVRM8DO4FKnJY2m4tM7Ygp5oIqbQXmbA%2FKw6oK2ZzJKiwGSqIsCW2l%2B7zkw07ml1WXHLMc6C4QpBKtlY%2BZ6IuSLUk1TvFZL14ckAmZSnsbpeRs%2BTsWPG67BSXjkA5ESmvMOlgXjwI7mhacGdqt0gmcgeUoH0PZUjeZviWyfmRsk5BccUFT1vFnLKbRBfpGPVaAdWCxFINy4Aq0omm6qluWKZ5gJjo3dtgQJkEDthD320jUbUh2d89B%2B7532yrnneClaGy0KTJfDpu%2FHhRns7Xc%2FRKmDTcY9pshmm%2F3KM3bG2j1UzM%2FPL6OBG5WL%2BIQ4rJaZvQzIsw84ZDs0eIMPRpuuMzVVs0fHScymVZRoG8RM2oB7051hbe%2B%2BuT1q%2B10M%2FM%2FdLgu8X2fFfIXRiM4kvkz5OGooOe0NfMfQy9TYA3V%2FctDptReTJJX26QPjdVa0rlFTOT%2B8NIH%2BNiTKjq9czGq9944J6ew8PYFJe4QZSWaxX39lnMU1%2Fo2xhaHNHY2mZpSEp%2BMebtbwlRkwkTEjHpAKjBP6rWVzW40vs2NG0IOz2jnwAl%2FiLCo%2ByTtN%2FwOXw2CXu8WsVqPFuugLL5JrZtAF982jf36ieYvwujbxrB4L%2FYu%2B%2F%2B9Bl8Hf9ei8EH&RelayState=%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=tTo3ZXM4xxKJAx1kqJor5%2F7X%2BvqYJQG3rU3zr09xX3oj08uCTbl4dBRspEyCJm4Xa9GC70mV6ihB5ObVQEzpCWT2w5YqlaMIPmsDwzad45SRo9st1teiaBUpMIll6jJDVezX7J0g65XyCOn9FIFlJNVhsmo0ZCvnPuqC1wDikdP82iX0kiwQ8MmFJ%2BL%2BDPD%2BW%2BBT0yJ2TAjq%2FTxeRdrvc2IPAJbJah%2FdFX2Ecitx5HDm%2BMibGUoPkD7XDmKpkPqhnUMPmx43GOKr70E9BsXSFePMvP%2FlohxXuDR8uBEBD2WUW6ojHJ%2BkJinoYvlcpbgvrOBnc1bDO3iB1YBcXFjb7j1otpP2OG4yvcwoB2d7YOsCBs%2FUIvRq0w87XlXe3yh3g2ZSbVE4tiPyI3eIOMmTLvgavsCkxVpTH38SogDx5FEAt%2FTT9Iey9iOQ7zghrb4d0vabZcWTg25cEM3UnyyeNULswYRHrEfBlworl1%2Bo%2FgcWuse5cz7GKnySD6E42PoWzrXEZCIULuMznqJfH9xp7UTVI1FW5PSUs1LiXJi6iMuv7EJlpQXOpqEdW08U6%2FgE3%2BoIe%2BAIHSFgK7B1ANFPimK2HVC5qUQAhHGCwiMk0TVelKB%2BmqwwvzCwXm7A4t1CGQnICt%2F2Gl0wp8JDfhDDEU0uFUA68KgDYF%2F6T8PSgi4%3D&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #1,491 of the top 1 million websitesTop 10K Site

AI Security Verdict

Low Risk

Confidence: 88%

Risk Score

Page impersonates Newton Europe login and harvests credentials on an unrelated Salesforce domain – high‑risk phishing.

Risk Factors

Brand impersonation

Credential collection on mismatched domain

Cross‑origin SSO redirect

High JavaScript obfuscation score

Safety Factors

Well‑established domain age (35 years)

Cisco Umbrella ranking within top 10 K

No Indicators of Compromise, YARA, or IDS alerts

Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 7 to 2

Domain age information unavailable

Details

Page Title

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Screenshot

Page Load Overview

1.35s

Total Load Time

HTTP Requests

Domains

503 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:en

Text Length:109 chars

Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence

Type: webapp

Method: structural

All Detected Categories

No categories detected

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	35.158.127.52Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
6	40.126.31.130Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
6	35.158.127.53Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
6	13.107.246.44Azure · CLOUD	United States	AS8075Microsoft Corporation
6	20.190.159.128Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
32	5	-	-