Security Scan Report: mohtest.service-now.com

Redirected to:
https://login.microsoftonline.com/b1e32279-3c8b-4c06-9279-43fd8b1c329b...
Submitted: Oct 6, 2026, 6:18:44 AMCompleted: Oct 6, 2026, 6:19:23 AMpubliccompleted

This website contacted 12 IPs in 4 countries across 8 domains to perform 46 HTTP transactions. The main domain is login.microsoftonline.com and was registered 10 years ago.

Submitted URL: https://mohtest.service-now.com

Effective URL:

https://login.microsoftonline.com/b1e32279-3c8b-4c06-9279-43fd8b1c329b...
Redirected

The Cisco Umbrella rank of the primary domain is #2,165 of the top 1 million websitesTop 10K Site

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Legitimate SAML SSO login: MOH ServiceNow portal redirects to Microsoft's official login.microsoftonline.com for authentication. No phishing, malware or credential-harvesting signals.

Safety Factors (5)
Redirect targets Microsoft's official login domain for enterprise SAML SSO — standard, expected behavior
ServiceNow entry domain is 24 years old and top-10K ranked in Cisco Umbrella
No credential-harvesting or payment form present in the captured DOM
All third-party script/network hosts belong to Microsoft authentication infrastructure
No Indicators of Compromise, YARA, IDS or kit-roster detections
Domain age information unavailable

Details

Page Title

MOH Now Platform

Scan Type

public

Domain Name Analysis

Domain 'mohtest.service-now.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'mohtest'. The second-level label 'service-now' is 11 characters long containing 4 vowels alongside 6 consonants; it also includes 1 hyphen. Tokenizing the label suggests 2 words: service, now. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mohtest.service-now.com

Page Load Overview

4.12s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:109 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13148.139.9.238Dublin, Leinster, Ireland
AS16839SERVICENOW, INC.
320.190.160.14Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
340.126.32.133Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
323.207.210.132Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
313.107.246.60Azure · CLOUDUnited States
AS8075Microsoft Corporation
320.190.160.22Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
34.207.44.68Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
320.190.160.65Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
313.107.246.44Azure · CLOUDUnited States
AS8075Microsoft Corporation
323.207.210.136Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
4612--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12EC2C50A3C15C91240B3116EEA3EF24DBE2D44526304FDA4FBDD846C7B89E9FC6865E6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:pqi1Uf77DL33ij//O8EEJkYsGWaau+AA5S1IGkFbt262pepyf3iabkJbPJ09K2B:pqtS1IGkF526geciabkJl09K2B

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:27919:kmGAgEhgFACFnEEYwgA6MQFSQ8SgCCcCVKlQAIBhOxMSBASoEAooBJylwsfwWsUBAoQ5WTABDATjIEERwCoBivuD8ISAVGAI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff
Perceptual Hash:a7272727070f0f0f
Difference Hash:c800000000000000
Wavelet Hash:27ffffff00000000
Color Hash:#931f35

Other Hashes

Crop Resistant:c800000000000000

Scan History

Scan history not available

Unable to load historical scan data