ScanMalware.com

Security Scan Report: dirhelp.service-now.com

Redirected to:
https://dir.my.idaptive.app/login?appkey=12816bda-d1d4-4d56-8214-af12a...
Site favicon
Submitted: Aug 20, 2026, 4:54:28 PMCompleted: Aug 20, 2026, 4:55:41 PMpubliccompleted

Summary

This website contacted 1 IP in 1 country across 5 domains to perform 2 HTTP transactions. The main domain is dir.my.idaptive.app and was registered NaN years ago.

Submitted URL: https://dirhelp.service-now.com

Effective URL: https://dir.my.idaptive.app/login?appkey=12816bda-d1d4-4d56-8214-af12a55ef36f&customerId=AAO0436&RelayState=https%3A%2F%2Fdirhelp.service-now.com%2Fnavpage.do&yfirtnecrun=true&stateId=mCyn4fSdkEeuHt08dGq2fG3FqelGJWuZ9vg2H-Scdls1Redirected

The Cisco Umbrella rank of the primary domain is #2,165 of the top 1 million websitesTop 10K Site

AI Security Verdict

Low Risk

Confidence: 82%

2
Risk Score

Legitimate login page for Idira; low risk despite high JS obfuscation score.

Risk Factors
JavaScript obfuscation score marked CRITICAL (high entropy/minified code)
Safety Factors
Established domain with long registration history
Brand matches the service (Idira/CyberArk) – not impersonation
Cross‑origin form submission appears to be a legitimate SSO flow
Legal pages (terms/privacy) present
Domain age information unavailable

Details

Page Title

ServiceNow DIR Service Desk

Scan Type

public

Language

🇺🇸

English

(50% confidence)

Category

technology software

(65%)

Domain Information

Within the commercial generic top-level domain (.com), 'dirhelp.service-now.com' is registered with subdomain 'dirhelp'. Its registrable label 'service-now' stretches across 11 characters split between 4 vowels and 6 consonants, along with one hyphen. Word splitting yields 2 words: service, now. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of aao0436.my.idaptive.app

Page Load Overview

13.96s
Total Load Time
47
HTTP Requests
5
Domains
202 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:50%
Script Type:Latin
Text Length:1,669 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software65% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
65%
government public service
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
47149.96.34.178United States
AS16839SERVICENOW, INC.
471--

Page Statistics

47
Requests
5
Unique Domains
1.3 MB
Total Size

Detected Technologies3

X-UA-Compatible
100%
PasswordField
100%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T151838C70C1941D338A179DD92069970A76EBC26DCE93252DFEFC5B9803EEC61CE1781A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:INUsvtalMwDziF9F00p2MwDziF9F00fOMwDziF9F00Gg1C+ox8CTx/692mW:YpvtaFUQUf6US

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:82132:GMQgaDEBIH1cCGfApoGpEASOBABZGAgBdBUAYCIAEh3HcgKIAk4b4hogYbFPI8QYQQcpCRhNgDMAUZFgA8CWcIBCyF8B0sGA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:b0b0fcf4fcf8f8f8
Perceptual Hash:deaeadc552d091c1
Difference Hash:6767242404000010
Wavelet Hash:b0b0f0b0f0f8f8f8
Color Hash:#2d9ed2

Other Hashes

Crop Resistant:6767242404000010

Scan History

Scan history not available

Unable to load historical scan data