Security Scan Report: us-ibm.enable-now.cloud.sap

Redirected to:
https://aa029qcbh.accounts.ondemand.com/oauth2/authorize?client_id=b75...
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 3 domains to perform 16 HTTP transactions. The main domain is cloud.sap and was registered 10 years ago.

Submitted URL: https://us-ibm.enable-now.cloud.sap

Effective URL:
https://aa029qcbh.accounts.ondemand.com/oauth2/authorize?client_id=b75...
Redirected

The Cisco Umbrella rank of the primary domain is #7,803 of the top 1 million websitesTop 10K Site

AI Security Verdict

Safe Website

Confidence: 88%

1
Risk Score

Legitimate SAP BTP corporate SSO login: enable-now.cloud.sap hands off to SAP's official Identity Authentication Service (accounts.ondemand.com) via a standard OAuth2/PKCE flow. No phishing, malware or exfiltration signals.

Safety Factors (5)
Authentication is handled by SAP's official Identity Authentication Service (accounts.ondemand.com)
OAuth2 authorization code + PKCE flow with redirect_uri restricted to an SAP hana.ondemand.com callback
Self-branded SAP corporate portal (title/tenant name match the service), no impersonation of a third party
No threat-intelligence, hunting rule, IDS or Safe-Browsing hits
All JavaScript served from the site's own domain; no third-party script hosts
Domain age information unavailable

Details

Page Title

SAP BTP subaccount IBM-INTL BUSINESS MACHINES CORPORATION EU3 - SEN: Sign In

Scan Type

public

Domain Name Analysis

The domain name 'us-ibm.enable-now.cloud.sap' uses the .sap top-level domain, featuring subdomain 'us-ibm.enable-now'. The second-level label 'cloud' is 5 characters long containing 2 vowels alongside 3 consonants. Breaking it apart gives 1 word: cloud. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://us-ibm.enable-now.cloud.sap

Page Load Overview

3.24s
Total Load Time
775 KB
Total Size

Language Analysis

Primary Language

πŸ‡ΊπŸ‡ΈEnglish
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:180 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software60% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
60%
corporate business
54%
cryptocurrency blockchain
36%
government public service
35%
finance banking
35%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
634.141.97.18Google Β· CDNFrankfurt am Main, Hesse, Germany
AS396982Google LLC
535.198.143.110Google Β· CDNFrankfurt am Main, Hesse, Germany
AS396982Google LLC
5157.133.166.69United States
AS35039SAP SE
163--

Detected Technologies2

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17601C0F254455C713EAA19019D1B9B4D8CFA10CF8C4B581448563AB45743A0F0B72795

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:kxs0hzHgBKRdV81oAgOHj1FkNrJxAgO31rh0AgWoeK2lwcXkb01Y5vAj2P5:k1Aw815D18ItZoglw+o1Aj2R

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:714:AAAgAEAAAABAAAAAAgAAAAAAEQAAEAAAAAAAAAAAABAAAAAAAAAAAIAAAAQIAAAAAAAEAgEAAAAAQACAAAAAgAAAAAAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1008081818180200
Perceptual Hash:999966cc8e669966
Difference Hash:20121a123232040c
Wavelet Hash:c3cbcbdbd8d8c0c0
Color Hash:N/A

Other Hashes

Crop Resistant:20121a123232040c

Scan History

Scan history not available

Unable to load historical scan data