phishing/scam

English

SESSID

Domain 'xcap.gateway.slb.com' uses the commercial generic top-level domain (.com), featuring subdomain 'xcap.gateway'. The registrable portion 'slb' spans 3 characters split between 0 vowels and three consonants. Splitting it apart reveals two words: s, lb. Median word length comes out to 1.5 characters. No strong language cues emerged from the frequency lists.

prot

server

inputStr

action

user

passwd

new-passwd

confirm-new-passwd

login

html/61/46/6146a500-5f08-4176-ba1b-1ae9e322c9a1.html.gz

default-src 'self'; script-src 'self' 'unsafe-inline'; img-src * data:; style-src 'self' 'unsafe-inline'; frame-ancestors 'none';

3a776234892e76fe2105236a8fa5f1ba40b18bb735fff77159f096f7a21aa350

f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

d82ffe10241e7b1d9e2187a429f9026f4f99c6870d8745c8e46c5638816c948c

6ea2e66f72efd18d9c4d36f3605eb02d62c7e87acb7aa7a85d72743c13b11eeb

c628205d0660134a90d5879ff747febb10ab12610d6ea5ade1dff5214fd531a9

156c503fbdc66c609994113ff1cb7174b406a1cad1f5f1611a50467c01fbd9b0

viewport

Tucows Domains Inc.

SLB.COM

Microsoft Abuse Contact

IPHostmaster IPHostmaster

Microsoft Corporation

Somesh Chaturmohta

Microsoft Routing, Peering, and DNS

Prachi Singh

Dawn Bedard

MSFT


     
    $(document).ready(function() {
      if ((favicon != null) && (favicon != '')) {
        $('link[rel="shortcut icon"]').attr('href', favicon);
      }

      if ((logo != null) && (logo != '')) {
        $('#logo img').attr('src', logo);
      }

      if ((bg_color != null) && (bg_color != '')) {
        $('body').css('background', bg_color);
      }

      if ((gp_portal_name != null) && (gp_portal_name != '')) {
        $('#heading').html(gp_portal_name);
      }

      if ((gp_portal_name_color != null) && (gp_portal_name_color != '')) {
        $('#heading').css('color', gp_portal_name_color);
      }

      if ((error_text_color != null) && (error_text_color != '')) {
        $('#dError').css('color', error_text_color);
      }
    });
     



    // Customizations - pass in values below.  Used in GlobalProtect login page
    // and also getsoftwarepage
    // Change customization of 'GlobalProtect Portal Home Page' to get uniform look

    var favicon = 'https://www.slb.com/-/media/images/logo/slb_logo_white_svg.ashx';                       // URL to the icon displayed in browser's address bar
    var logo = 'https://slb.widen.net/content/mlyp6tqjmi/png/SLB_Logo_Black_General.png?w=300';            // URL to the company logo
    var bg_color = '';              // Background color
    var gp_portal_name = 'Contractor Login';        // Text under company logo
    var gp_portal_name_color = '';  // Color for text under company logo
    var error_text_color = '';      // Text color for logon failure message
  

Requests	IP Address	Location	AS Autonomous System
6	192.23.0.36	United States	AS72Schlumberger Limited
4	20.23.79.56	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
4	18.66.122.56	United States	AS16509Amazon.com, Inc.
14	3	-	-

Security Scan Report: xcap.gateway.slb.com

Summary

AI Security Verdict

Low Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History