technology software

government public service

finance banking

English

JSESSIONID

You're looking at domain 'loginx.varonis.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'loginx'. Its registrable label 'varonis' stretches across 7 characters split between three vowels and 4 consonants. Tokenizing the label suggests 3 words: var, on, is. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

username

password

remember

html/87/11/87116223-3ef8-4041-b407-d6ccbf42a899.html.gz

default-src 'self' varonisx.okta.com loginx.varonis.com *.oktacdn.com; connect-src 'self' varonisx.okta.com varonisx-admin.okta.com loginx.varonis.com *.oktacdn.com *.mixpanel.com *.mapbox.com varonisx.kerberos.okta.com varonisx.mtls.okta.com https://oinmanager.okta.com data: *.ingest.sentry.io; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' varonisx.okta.com loginx.varonis.com *.oktacdn.com; style-src 'unsafe-inline' 'self' 'report-sample' varonisx.okta.com loginx.varonis.com *.oktacdn.com; frame-src 'self' varonisx.okta.com varonisx-admin.okta.com loginx.varonis.com login.okta.com *.vidyard.com; img-src 'self' varonisx.okta.com loginx.varonis.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' varonisx.okta.com loginx.varonis.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self'

default-src 'self' varonisx.okta.com loginx.varonis.com *.oktacdn.com; connect-src 'self' varonisx.okta.com varonisx-admin.okta.com loginx.varonis.com *.oktacdn.com *.mixpanel.com *.mapbox.com varonisx.kerberos.okta.com varonisx.mtls.okta.com https://oinmanager.okta.com data: *.ingest.sentry.io; script-src 'unsafe-inline' 'nonce-0VT54N9DrXv9W7WqWA-sIQ' 'self' 'report-sample' varonisx.okta.com loginx.varonis.com *.oktacdn.com; style-src 'unsafe-inline' 'nonce-0VT54N9DrXv9W7WqWA-sIQ' 'self' 'report-sample' varonisx.okta.com loginx.varonis.com *.oktacdn.com; frame-src 'self' varonisx.okta.com varonisx-admin.okta.com loginx.varonis.com login.okta.com *.vidyard.com; img-src 'self' varonisx.okta.com loginx.varonis.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' varonisx.okta.com loginx.varonis.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self'

default-src 'none'; img-src 'self'; require-trusted-types-for 'script'; report-uri  https://oktacsp.report-uri.com/r/t/csp/enforce

default-src 'self' ok4-okta.okta.com *.oktacdn.com; connect-src 'self' ok4-okta.okta.com ok4-okta-admin.okta.com *.oktacdn.com *.mixpanel.com *.mapbox.com ok4-okta.kerberos.okta.com ok4-okta.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: *.ingest.sentry.io; script-src 'unsafe-inline' 'nonce-NoP4FenBUtyCrltn_PGJ3g' 'self' 'report-sample' ok4-okta.okta.com *.oktacdn.com; style-src 'unsafe-inline' 'nonce-NoP4FenBUtyCrltn_PGJ3g' 'self' 'report-sample' ok4-okta.okta.com *.oktacdn.com; frame-src 'self' ok4-okta.okta.com ok4-okta-admin.okta.com login.okta.com *.vidyard.com com-okta-authenticator:; img-src 'self' ok4-okta.okta.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' ok4-okta.okta.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self'

7bad33e1829e8332dab9a84ca364035a1224423fc41ce114dc89e35197279ef1

f8709740a7d40e01167843b91935a7bc825aae785bd6ee373f362063a248e34e

ba5c5832ac2c55e09f357db165fc99c684162b4b81fabd728c35da5b93497b3f

dd32c3ac97bdd32d2384f9d23574aa7fefee13ab59b3e99deb787041ec17a777

30b5f7be3e081536e50553b4a66ff7e77fb078218fa32ce081d73d75d7e9f6e5

40ab9860fac1b7f44a61a8edebba0d2a04287ed3f5599ec7211843a80a2573da

f0c357946f3ea332132799679838b1d223cdc26b99ec593181deb051500c1b64

viewport

robots

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

EuroDNS S.A.

VARONIS.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZON-CF


  // Expose CSP nonce so SIW Gen 3's webpack runtime can tag <style>/<script>
  // elements that style-loader and runtime-chunk-loader inject dynamically.
  window.cspNonce = "-W8SedHoLofFrEUzh6oWAg";

  var signInSuccessCallBackFunction;
  var oktaData = {"redirectUri":"https\x3A\x2F\x2Floginx.varonis.com","isMobileSso":false,"orgSyncToAccountChooserEnabled":true,"fromUri":"","isMobileClientLogin":false,"countryIso":"DE","inactiveTab":{"elementId":"inactive\x2Dtab\x2Dmain\x2Ddiv","avoidPageRefresh":true,"enabled":false},"signIn":{"logoText":"Varonis\x20Systems\x20\x28External\x29\x20logo","features":{"isBotProtectionEnabled":false,"emailRecovery":true,"deviceFingerprinting":true,"consent":true,"useDeviceFingerprintForSecurityImage":true,"customExpiredPassword":true,"router":true,"showPasswordToggleOnSignInPage":false,"securityImage":false,"autoPush":true,"smsRecovery":false,"idpDiscovery":false,"selfServiceUnlock":true,"webauthn":true,"showPasswordRequirementsAsHtmlList":true,"registration":false,"rememberMe":true,"callRecovery":false,"multiOptionalFactorEnroll":true},"baseUrl":"https\x3A\x2F\x2Floginx.varonis.com","brandName":"Varonis\x20Systems\x20\x28External\x29","assets":{"baseUrl":"https\x3A\x2F\x2Fok4static2.oktacdn.com\x2Fassets\x2Fjs\x2Fsdk\x2Fokta\x2Dsignin\x2Dwidget\x2F7.47.0"},"customButtons":[],"idpDiscovery":{"requestContext":""},"logo":"https\x3A\x2F\x2Fok4static2.oktacdn.com\x2Ffs\x2Fbco\x2F1\x2Ffs0z95qqm2p2Ddosf1t7","language":"en","helpLinks":{"help":"","forgotPassword":"https\x3A\x2F\x2Fmy.varonis.com\x2Faccount\x2Frecover","unlock":"","custom":[{"text":"\x20Don\x27t\x20have\x20a\x20Varonis\x20account\x3F\x20Sign\x20up\x20here","href":"https\x3A\x2F\x2Fmy.varonis.com\x2Faccount\x2Fregister"}]},"piv":{},"i18n":{"en":{"mfa.challenge.password.placeholder":"Password","help":"Help","password.forgot.email.or.username.tooltip":"Email\x20or\x20Username","needhelp":"Need\x20help\x20signing\x20in\x3F","primaryauth.username.placeholder":"Email","password.forgot.email.or.username.placeholder":"Email\x20or\x20Username","account.unlock.email.or.username.tooltip":"Email\x20or\x20Username","unlockaccount":"Unlock\x20account\x3F","account.unlock.email.or.username.placeholder":"Email\x20or\x20Username","primaryauth.password.placeholder":"Password","primaryauth.title":"Sign\x20In","forgotpassword":"\x20Forgot\x20your\x20password\x3F\x20Recover\x20account"}}},"accountChooserDiscoveryUrl":"https\x3A\x2F\x2Flogin.okta.com\x2Fdiscovery\x2Fiframe.html"};

  var runLoginPage = function(fn) {
    var mainScript = document.createElement('script');
    mainScript.src = "https://ok4static2.oktacdn.com/assets/js/mvc/loginpage/initLoginPage.pack.f45aba2fcd86049fdc0a4446a0b4aa60.js";
    mainScript.integrity = "sha384-Ti1AVzmYlM/NMC9etUiz87VUWhwg+Bo9yxzyhSC6H+BcvWDdE/RfZIEFxIsvkfcf";
    mainScript.crossOrigin = "anonymous";
    document.getElementsByTagName('head')[0].appendChild(mainScript);
    fn && mainScript.addEventListener('load', function () { setTimeout(fn, 1) });
  };

  var OktaUtil = {
    _addClass: function(el, className) {
      if(el) {
        var elementClasses = el.className.split(" ");
        if (elementClasses.indexOf(className) == -1) {
          el.className += " " + className;
        }
      }
    },

    _removeElement: function(el) {
      if(el) {
        el.parentNode.removeChild(el);
      }
    },

    _hideElement: function(el) {
      if(el) {
        el.classList.add('hidden');
      }
    },

    _isDocumentVisible: function() {
      return document.visibilityState === 'visible';
    },

    addLoginContainerClass: function () {
      this._addClass(document.getElementById('okta-login-container'), 'login-container');
    },

    showUnsupportedCookieWarning: function () {
      document.getElementById('okta-sign-in').classList.remove('hidden');
      document.getElementById('unsupported-cookie').classList.remove('hidden');
    },

    removeUnsupportedCookieWarning: function () {
      this._removeElement(document.getElementById('okta-sign-in'));
    },

    hideOktaLoginContainer: function () {
      this._hideElement(document.getElementById('okta-login-container'));
    },

    isChromeOs:  function () {
      return /\bCrOS\b/.test(navigator.userAgent);
    },

    addChromeOSScript: function() {
      var chromeOSScript = document.createElement('script');
      chromeOSScript.src = "/js/google/users-1.0.js";
      document.getElementsByTagName('head')[0].appendChild(chromeOSScript);
    },

    getSignInWidgetConfig: function () {
        if (oktaData.inactiveTab && oktaData.inactiveTab.enabled && !this._isDocumentVisible() && !oktaData.inactiveTab.avoidPageRefresh) {
            // Show a loading state and wait for the visibility event
            this.hideOktaLoginContainer();
            // remove stateToken so SIW does not attempt a login flow
            oktaData.signIn.stateToken = undefined;
        }
        return oktaData.signIn;
    },

    completeLogin: function (res) {
      signInSuccessCallBackFunction(res);
    },

    getRequestContext: function () {
      return oktaData.requestContext;
    },

    setRedirectUri: function (uri) {
      oktaData.redirectUri = uri;
    },

    init: function () {
      if (!navigator.cookieEnabled) {
        this.showUnsupportedCookieWarning();
        this.hideOktaLoginContainer();
      } else {
        this.removeUnsupportedCookieWarning();


        // add class if app login banner is present
        if (oktaData.isAppBannerVisible) {
          this.addLoginContainerClass();
        }

        oktaData.isCustomSignIn = true;
        oktaData.hasChromeOSFeature = this.isChromeOs();
        if (oktaData.hasChromeOSFeature) {
          this.addChromeOSScript();
        }
        runLoginPage(function () {
          var res = OktaLogin.initLoginPage(oktaData);
          oktaData.signIn = res.signIn;
          signInSuccessCallBackFunction = res.signInSuccessCallbackFn;

        });
      }
    }
  };
  OktaUtil.init();
  //# sourceURL=OktaUtil.js



        // "config" object contains default widget configuration
        // with any custom overrides defined in your admin settings.
      var config = OktaUtil.getSignInWidgetConfig();      
 
        // Render the Okta Sign-In Widget
        var oktaSignIn = new OktaSignIn(config);
        oktaSignIn.renderEl({ el: '#okta-login-container' },
            OktaUtil.completeLogin,
            function(error) {
                // Logs errors that occur when configuring the widget.
                // Remove or replace this with your own custom error handler.
                console.log(error.message, error);
            }
        );      
      
    


            // Check if oktaSignIn is initialized and has the authClient
            // And we rely on customer names the variable exactly "oktaSignIn"
            if (typeof oktaSignIn !== "undefined" && oktaSignIn.authClient) {
                var oktaUA = oktaSignIn.authClient._oktaUserAgent;
                if (oktaUA && typeof oktaUA.getHttpHeader === "function" && typeof oktaUA.addEnvironment === "function") {
                    var extendedHeader = oktaUA.getHttpHeader() || {};
                    var val = extendedHeader["X-Okta-User-Agent-Extended"] || "";
                    // Set okta-hosted environment for telemetry and analytics
                    // This identifies that the widget is running in Okta-hosted login pages
                    if (val.indexOf("okta-hosted") < 0) {
                        oktaUA.addEnvironment("okta-hosted");
                    }
                }
            }
        

Requests	IP Address	Location	AS Autonomous System
7	3.33.145.223Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	65.8.131.109Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
13	2	-	-

Security Scan Report: loginx.varonis.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History