Security Scan Report: schottprod.service-now.com.mcas.ms

Redirected to:
https://login.microsoftonline.com/086819db-ed40-4544-bfd2-412c6f1af603...
Submitted: Sep 29, 2026, 1:34:21 PMCompleted: Sep 29, 2026, 1:34:58 PMpubliccompleted

This website contacted 18 IPs in 5 countries across 10 domains to perform 49 HTTP transactions. The main domain is login.microsoftonline.com and was registered 10 years ago.

Submitted URL: https://schottprod.service-now.com.mcas.ms

Effective URL:

https://login.microsoftonline.com/086819db-ed40-4544-bfd2-412c6f1af603...
Redirected

The Cisco Umbrella rank of the primary domain is #7,107 of the top 1 million websitesTop 10K Site

AI Security Verdict

Safe Website

Confidence: 88%

0
Risk Score

Legitimate Microsoft Entra SAML SSO redirect for a ServiceNow tenant, proxied via Microsoft's mcas.ms domain. No credential or payment forms, no Indicators of Compromise — normal sign-in flow.

Safety Factors (5)
Cross-domain redirect ends on Microsoft's official login.microsoftonline.com authentication endpoint
External resource domains are all Microsoft properties (aadcdn.msauth.net, login.live.com, autologon.microsoftazuread-sso.com, eu-mobile.events.data.microsoft.com)
No credential, password, or payment form fields in the captured DOM
SAMLRequest/RelayState parameters target the legitimate schottprod.service-now.com tenant
Clean threat-intel: no Indicators of Compromise, malware, IDS, or YARA hits
Domain age information unavailable

Details

Page Title

Continue

Scan Type

public

Domain Name Analysis

You're looking at domain 'schottprod.service-now.com.mcas.ms' on the .ms country-code top-level domain with subdomain 'schottprod.service-now.com'. The registrable portion 'mcas' spans 4 characters containing one vowel alongside three consonants. Breaking it apart gives 2 words: mc, as. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://schottprod.service-now.com.mcas.ms

Page Load Overview

3.27s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:215 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software34% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
34%
news media journalism
33%
finance banking
28%
government public service
27%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1520.90.50.115Azure · CLOUDCardiff, Wales, United Kingdom
AS8075Microsoft Corporation
2150.171.109.194Azure · CLOUDUnited States
AS8075Microsoft Corporation
2149.96.176.91Düsseldorf, North Rhine-Westphalia, Germany
AS16839SERVICENOW, INC.
220.190.160.131Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
220.190.160.132Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
223.207.210.132Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
213.107.246.44Azure · CLOUDUnited States
AS8075Microsoft Corporation
240.126.31.129Office365 · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
24.207.44.69Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
2150.171.109.193Azure · CLOUDUnited States
AS8075Microsoft Corporation
4918--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T152214289FCD368716B0345FC58F7A10CB63A622A4344C82038CC82296FD9FEA05937CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:kx8SHH+WKA6ydTmEMSp+31XKNFuNVvPhP7DNUD1XKYXlV4D:ZPyEELp+31XKjY5jU1XKYXl6D

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1160:EAAAAAAAAAAAAAABAAAoAAAAAAAAAAAABQAIAAQAAAAoAABAAABUAKAACAAgCAARAAAAAAAICCAAAAAAAAAAAAAAAAAAMEAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff
Perceptual Hash:87070f0f0f0f0f1f
Difference Hash:8000000000000000
Wavelet Hash:70f0f0f0f0f0f0f0
Color Hash:#e06c6c

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data