Security Scan: Sign in

Summary

This website contacted 30 IPs in 4 countries across 29 domains to perform 80 HTTP transactions. The main domain is signin.spark.co.nz.

Submitted URL: https://www.spark.co.nz/cwa/openam/SSORedirect/metaAlias/Xtramail/idp1?SAMLRequest=hZJva9swEIe%2FitF7W45TO7FIAl7SQaDbSrKNsTdFU65U1Poz3bnu9ukrOd3I3nSvBKf7cc9z0gql6b3oBnqwB%2Fg5AFL2bHqLYrpYsyFY4SRqFFYaQEFKHLsPN6IqSuGDI6dczy4ibyckIgTSzrJsv1uzu2VzXVfzxaKdV%2B3iuq1nbV13Tdl2TbN9V89nLPsKAWP%2FmsV4DCEOsLdI0lIslVWTl3U%2Bu%2Fo8W4pqKcrld5btooO2kqbUA5FHwfk4jgV6GR4L5Qr7m6tRcuchEvLj8dMBTjqAIm6AZNdrifwbBWmk7rk%2B%2BYixdRYhzXzLTp2bhBpCiGeuje%2B10sSy9y4omJa8ZveyR0gqt3Eb%2Bgn%2BVro%2Fy0nDBgPhCOFJK%2FhyuLkQgR8Jq3iOfK8uBvreWe4d0gHQJwi2WaXHENO%2BwkZ6j4MmyFMxpzGs%2BOX16vwJPkah%2Fe7WReZfidjI%2F%2Fimij7l91OriEAWdfSOJhFo3AaQFO0oDMD45jzy36%2B2eQE%3D&RelayState=https%3A%2F%2Fwebmail.xtra.co.nz%2Findex.cgi&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=lE6fcGxmvmZnrmt1jDz5PqvPXRNlkKqNZkqSgj6IrFEooqxA%2Fz4FOepTaU6g5gii8wJuC9deRwOSCz62nmCGZ1Xb9rs5Mm4GXiV8kTGL5zX90TwtGkXZfsciddBgzHvpAKP%2BM8SfJplWJfkBaRPc6zb9hlmLRUASiW8aNbmXYDHz0QP8V3SfXaTUZtiMFboSAaBytGB2Y8cE2XhJNbaJmYd0euyjYjxZYmMqjRX%2FIh5lg%2FSYwsiAA%2B4oZdWYR8yt6eC7yR3BFSgoJ2Wkdn30lRE32QKQvnahlr49w6jyG1dxc%2BHmjwVnKVHNX48eVJ37ctOCg02uJTHWSIa5d6SPSA%3D%3D

Effective URL: https://signin.spark.co.nz/?goto=https://www.spark.co.nz/xtramail/checkcookies?spEntityID%3Dappsuite-saml-twr%26goto%3Dhttp://openam.internal.spark.co.nz:8080/openam/saml2/continue/metaAlias/Xtramail/idp1?secondVisitUrl%253D/SSORedirect/metaAlias/Xtramail/idp1?ReqID%25253D_86E5237793297E951955A609A66CB531%26AMAuthCookie%3D&brand=xtramailRedirected

The Cisco Umbrella rank of the primary domain is #416,869 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Login page for Xtra Mail on spark.co.nz shows unknown age, low ranking, critical IDS alerts, and heavily obfuscated JS, indicating credential phishing and possible malware; avoid and report.

Risk Factors

Unknown domain age combined with credential collection

Low Cisco Umbrella ranking for a brand‑claimed site

Critical IDS alerts for possible data exfiltration and command‑and‑control

Highly obfuscated JavaScript code

Multiple redirects increasing suspicion

Domain age information unavailable

Details

Page Title

Scan Type

public

Language

🇺🇸

English

(54% confidence)

Screenshot

Page Load Overview

6.08s

Total Load Time

HTTP Requests

Domains

848 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:54%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:54%

Script Type:Latin

Text Length:187 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical29% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

29%

technology software

27%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
22	146.171.248.215	New Zealand	AS2570Spark New Zealand Trading Ltd
2	66.22.91.1	Auckland, Auckland, New Zealand	AS48851Radware Ltd
2	66.22.91.28	Auckland, Auckland, New Zealand	AS48851Radware Ltd
2	216.239.32.36	United States	AS15169Google LLC
2	142.251.20.149	United States	AS15169Google LLC
2	52.19.224.221	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
2	2.20.245.170	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	142.251.152.119	United States	AS15169Google LLC
2	63.182.111.82	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
2	15.197.224.21	United States	AS16509Amazon.com, Inc.
80	30	-	-