government public service

finance banking

technology software

news media journalism

social media network

English

_ga_7V3PRKG4L0

_gcl_au

JSESSIONID

Domain 'idp.mysph.sph.com.sg' uses the Singaporean country-code top-level domain (.com.sg) with subdomain 'idp.mysph'. The second-level label 'sph' is 3 characters long with 0 vowels and 3 consonants. Breaking it apart gives 1 word: sph. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

username

password

remember

html/5e/7d/5e7d057f-2130-4367-a3a6-7d603f81a1a5.html.gz

default-src 'self' sph.okta.com idp.mysph.sph.com.sg *.oktacdn.com; connect-src 'self' sph.okta.com sph-admin.okta.com idp.mysph.sph.com.sg *.oktacdn.com *.mixpanel.com *.mapbox.com sph.kerberos.okta.com https://oinmanager.okta.com data: *.ingest.sentry.io; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' sph.okta.com idp.mysph.sph.com.sg *.oktacdn.com; style-src 'unsafe-inline' 'self' 'report-sample' sph.okta.com idp.mysph.sph.com.sg *.oktacdn.com; frame-src 'self' sph.okta.com sph-admin.okta.com idp.mysph.sph.com.sg login.okta.com *.vidyard.com https://static.mysph.sph.com.sg; img-src 'self' sph.okta.com idp.mysph.sph.com.sg *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' sph.okta.com idp.mysph.sph.com.sg data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self'

default-src 'none'; img-src 'self'; require-trusted-types-for 'script'; report-uri  https://oktacsp.report-uri.com/r/t/csp/enforce

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:171:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:139:0

17eb4e2c1b9e78c024883990fb58cc88693ff2506038d7b5c7838d5931adff54

f8709740a7d40e01167843b91935a7bc825aae785bd6ee373f362063a248e34e

5fe775d52c5dd61dae8d9892b146097e97fa6f15a70bbbc47728dd74fbf2eb48

367a32bcd853b32ea4c7248c1757621cde533c1636042c4bb096b519aca4a37c

ba5c5832ac2c55e09f357db165fc99c684162b4b81fabd728c35da5b93497b3f

41d7f2f555a81e83b22768a96c0c465893c928c7ecf8543ea1cfc542fff43570

dd32c3ac97bdd32d2384f9d23574aa7fefee13ab59b3e99deb787041ec17a777

ba1d373db4f7db1163beec3773147515f0a8168d8487728a96f96aa6fdf37a8d

f4a9961aa9eaf923b4711b13e09d90b29585c9f00ca2a681a26489810af7622b

c48bb242f13c208e3c14315adbdb3221ed2541bf902c214599f7fa600ab63f21

viewport

robots

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

html/5e/7d/5e7d057f-2130-4367-a3a6-7d603f81a1a5_nodriver.html.gz

SPH - Sign In

sph.com.sg

Abuse

Google LLC

GOOGLE


  var signInSuccessCallBackFunction;
  var oktaData = {"redirectUri":"https\x3A\x2F\x2Fidp.mysph.sph.com.sg","isMobileSso":false,"orgSyncToAccountChooserEnabled":true,"fromUri":"","isMobileClientLogin":false,"countryIso":"FI","inactiveTab":{"elementId":"inactive\x2Dtab\x2Dmain\x2Ddiv","avoidPageRefresh":true,"enabled":false},"signIn":{"logoText":"SPH\x20logo","features":{"isBotProtectionEnabled":false,"emailRecovery":true,"deviceFingerprinting":true,"consent":true,"useDeviceFingerprintForSecurityImage":true,"customExpiredPassword":true,"router":true,"showPasswordToggleOnSignInPage":false,"securityImage":false,"autoPush":true,"smsRecovery":true,"idpDiscovery":false,"selfServiceUnlock":true,"webauthn":true,"showPasswordRequirementsAsHtmlList":true,"registration":false,"rememberMe":true,"callRecovery":false,"multiOptionalFactorEnroll":true},"baseUrl":"https\x3A\x2F\x2Fidp.mysph.sph.com.sg","brandName":"SPH","assets":{"baseUrl":"https\x3A\x2F\x2Fok11static2.oktacdn.com\x2Fassets\x2Fjs\x2Fsdk\x2Fokta\x2Dsignin\x2Dwidget\x2F4.5.2"},"customButtons":[],"idpDiscovery":{"requestContext":""},"logo":"https\x3A\x2F\x2Fok11static2.oktacdn.com\x2Ffs\x2Fbco\x2F1\x2Ffs0dbohmkmx5MBeSz4x7","language":"en","helpLinks":{"help":"","forgotPassword":"","unlock":"","custom":[]},"piv":{},"i18n":{"en":{"mfa.challenge.password.placeholder":"Password","help":"Help","password.forgot.email.or.username.tooltip":"Email\x20or\x20Username","needhelp":"Need\x20help\x20signing\x20in\x3F","primaryauth.username.placeholder":"Username","password.forgot.email.or.username.placeholder":"Email\x20or\x20Username","account.unlock.email.or.username.tooltip":"Email\x20or\x20Username","unlockaccount":"Unlock\x20account\x3F","account.unlock.email.or.username.placeholder":"Email\x20or\x20Username","primaryauth.password.placeholder":"Password","primaryauth.title":"Sign\x20In","forgotpassword":"Forgot\x20password\x3F"}}},"accountChooserDiscoveryUrl":"https\x3A\x2F\x2Flogin.okta.com\x2Fdiscovery\x2Fiframe.html"};

  var runLoginPage = function(fn) {
    var mainScript = document.createElement('script');
    mainScript.src = "https://ok11static2.oktacdn.com/assets/js/mvc/loginpage/initLoginPage.pack.f45aba2fcd86049fdc0a4446a0b4aa60.js";
    mainScript.integrity = "sha384-Ti1AVzmYlM/NMC9etUiz87VUWhwg+Bo9yxzyhSC6H+BcvWDdE/RfZIEFxIsvkfcf";
    mainScript.crossOrigin = "anonymous";
    document.getElementsByTagName('head')[0].appendChild(mainScript);
    fn && mainScript.addEventListener('load', function () { setTimeout(fn, 1) });
  };

  var OktaUtil = {
    _addClass: function(el, className) {
      if(el) {
        var elementClasses = el.className.split(" ");
        if (elementClasses.indexOf(className) == -1) {
          el.className += " " + className;
        }
      }
    },

    _removeElement: function(el) {
      if(el) {
        el.parentNode.removeChild(el);
      }
    },

    _hideElement: function(el) {
      if(el) {
        el.style.display = 'none';
      }
    },

    _isDocumentVisible: function() {
      return document.visibilityState === 'visible';
    },

    addLoginContainerClass: function () {
      this._addClass(document.getElementById('okta-login-container'), 'login-container');
    },

    showUnsupportedCookieWarning: function () {
      document.getElementById('okta-sign-in').removeAttribute('style');
      document.getElementById('unsupported-cookie').removeAttribute('style');
    },

    removeUnsupportedCookieWarning: function () {
      this._removeElement(document.getElementById('okta-sign-in'));
    },

    hideOktaLoginContainer: function () {
      this._hideElement(document.getElementById('okta-login-container'));
    },

    isChromeOs:  function () {
      return /\bCrOS\b/.test(navigator.userAgent);
    },

    addChromeOSScript: function() {
      var chromeOSScript = document.createElement('script');
      chromeOSScript.src = "/js/google/users-1.0.js";
      document.getElementsByTagName('head')[0].appendChild(chromeOSScript);
    },

    getSignInWidgetConfig: function () {
        if (oktaData.inactiveTab && oktaData.inactiveTab.enabled && !this._isDocumentVisible() && !oktaData.inactiveTab.avoidPageRefresh) {
            // Show a loading state and wait for the visibility event
            this.hideOktaLoginContainer();
            // remove stateToken so SIW does not attempt a login flow
            oktaData.signIn.stateToken = undefined;
        }
        return oktaData.signIn;
    },

    completeLogin: function (res) {
      signInSuccessCallBackFunction(res);
    },

    getRequestContext: function () {
      return oktaData.requestContext;
    },

    setRedirectUri: function (uri) {
      oktaData.redirectUri = uri;
    },

    init: function () {
      if (!navigator.cookieEnabled) {
        this.showUnsupportedCookieWarning();
        this.hideOktaLoginContainer();
      } else {
        this.removeUnsupportedCookieWarning();


        // add class if app login banner is present
        if (oktaData.isAppBannerVisible) {
          this.addLoginContainerClass();
        }

        oktaData.isCustomSignIn = true;
        oktaData.hasChromeOSFeature = this.isChromeOs();
        if (oktaData.hasChromeOSFeature) {
          this.addChromeOSScript();
        }
        runLoginPage(function () {
          var res = OktaLogin.initLoginPage(oktaData);
          oktaData.signIn = res.signIn;
          signInSuccessCallBackFunction = res.signInSuccessCallbackFn;

        });
      }
    }
  };
  OktaUtil.init();
  //# sourceURL=OktaUtil.js



        // "config" object contains default widget configuration
        // with any custom overrides defined in your admin settings.
        function getUrlParams() {
            const params = new URL(decodeURIComponent(window.location.href)).searchParams;
            return params;
        }
        function isValidUrl(str) {
            const pattern = new RegExp(
                '^(https?:\\/\\/)?' + // protocol
                '((([a-z\\d]([a-z\\d-]*[a-z\\d])*)\\.)+[a-z]{2,}|' + // domain name
                '((\\d{1,3}\\.){3}\\d{1,3}))' + // OR ip (v4) address
                '(\\:\\d+)?(\\/[-a-z\\d%_.~+]*)*' + // port and path
                '(\\?[;&a-z\\d%_.~+=-]*)?' + // query string
                '(\\#[-a-z\\d_]*)?$', // fragment locator
                'i'
            );
            return pattern.test(str);
        }
        var config = OktaUtil.getSignInWidgetConfig();
        var context = OktaUtil.getRequestContext();
        //console.log(context);
        //console.log(config);
        if (config.stateToken && context && context.target && context.target.name == "oidc_client") {
            var st = config.stateToken;
            var oAuthClientId = context.target.clientId;
            var ru = context.authentication.request.redirect_uri;
            var stateVar = context.authentication.request.state;
            var returnURL = 'https://static.mysph.sph.com.sg/mysph/standalone/oauth/login.html?clientId=' + oAuthClientId + '&stateToken=' + st + '&redirectURL=' + ru + "&state=" + stateVar;
            if (context.user && context.user.profile && context.user.profile.login) {
                returnURL += "&login_prompt=" + context.user.profile.login;
            }
          	if(context.target.label=="Mobile Apps"){
                returnURL = 'https://static.mysph.sph.com.sg/mysph/standalone/oauth/mobile_login.html?clientId=' + oAuthClientId + '&stateToken=' + st + '&redirectURL=' + ru + "&state=" + stateVar;
            }
            if (context.authentication.client.name === "Scarlet 2.0") {
                let currentURL = window.location.href;
                let dm = "event.sph.com.sg";
                if (document.referrer) {
                    dm = document.referrer.split("/")[2];
                    console.log("Domain coming from referrer value:: ", dm);
                }
                console.log("Scarlet2.0 OIDC login page");
                if (isValidUrl(currentURL)) {
                    let params = getUrlParams(currentURL);
                    let svc = "stp",
                        lan = "en",
                        gbURL = "",
                        campCode = "",
                        domain = "";
                    if (params.get("svc") !== undefined && params.get("svc") !== null) {
                        svc = "&svc=" + params.get("svc");
                    }
                    if (params.get("lan") !== undefined && params.get("lan") !== null) {
                        lan = "&lan=" + params.get("lan");
                    }
                    if (
                        params.get("campCode") !== undefined &&
                        params.get("campCode") !== null
                    ) {
                        campCode = "&campCode=" + params.get("campCode");
                    }
                    if (params.get("domain") !== undefined && params.get("domain") !== null) 
                    {
                        domain = "&domain="+ params.get("domain");
                    }else 
                        domain = "&domain=" + dm;

                    if (params.get("gbURL") !== undefined && params.get("gbURL") !== null) {
                        if (isValidUrl(params.get("gbURL")))
                            gbURL = "&gbURL=" + params.get("gbURL");
                    }

                    returnURL =
                        "https://static.mysph.sph.com.sg/mysph/standalone/oauth/custom-login.html?clientId=" +
                        oAuthClientId +
                        "&stateToken=" +
                        st +
                        "&redirectURL=" +
                        ru +
                        "&state=" +
                        stateVar +
                        svc +
                        lan +
                        domain +
                        campCode +
                        gbURL;
                }
            }

            if(context.authentication.client.name.includes("ePaper2")){
                let currentURL=window.location.href;
                if(isValidUrl(currentURL))
                {
                    const params=getUrlParams(currentURL);
                    const svc = params.get("svc") ?? "stp"
                    const lan = params.get("lan") ?? "en"
                    returnURL = 'https://static.mysph.sph.com.sg/mysph/standalone/oauth/ePaperOIDCLogin.html?clientId=' + oAuthClientId + '&stateToken=' + st + '&redirectURL=' + ru + "&state=" + stateVar+"&svc="+svc+"&lan="+lan;

                }
                else
                    console.log("Authz URL is not valid, loading the default login page.")
            }
            window.location.href = returnURL;
        } else if (window.self == window.top) {
            // Render the Okta Sign-In Widget
            var oktaSignIn = new OktaSignIn(config);
            if (window.self == window.top) {
                oktaSignIn.renderEl({ el: '#okta-login-container' },
                    OktaUtil.completeLogin,
                    function (error) {
                        // Logs errors that occur when configuring the widget.
                        // Remove or replace this with your own custom error handler.
                        console.log(error.message, error);
                    }
                );
            }
        }
    

Requests	IP Address	Location	AS Autonomous System
6	172.217.16.200	United States	AS15169
6	3.33.189.110	United States	AS16509
6	13.33.187.7	United States	Unknown
18	3	-	-

Security Scan Report: idp.mysph.sph.com.sg

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History