Security Scan Report: txdotnow.servicenowservices.com

Redirected to:
https://identity.txdot.gov/idp/SSO.saml2?SAMLRequest=nVNNb9swDP0rhu7xV...
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 30 HTTP transactions. The main domain is servicenowservices.com and was registered 9 years ago.

Submitted URL: https://txdotnow.servicenowservices.com

Effective URL:
https://identity.txdot.gov/idp/SSO.saml2?SAMLRequest=nVNNb9swDP0rhu7xV...
Redirected

The Cisco Umbrella rank of the primary domain is #34,833 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 90%

1
Risk Score

Legitimate ServiceNow portal redirecting to the official TxDOT (.gov) SAML single-sign-on endpoint. No phishing, credential harvesting, or malware indicators.

Safety Factors (4)
Redirect target is an official US government (.gov) SAML identity endpoint
Hosted on the legitimate ServiceNow platform (servicenowservices.com)
SAMLRequest/RelayState parameters are normal for SSO handoff, not credential capture
No forms capturing credentials or payment data; no threat-intel or malware hits
Domain age information unavailable

Details

Page Title

TxDOTNow

Scan Type

public

Domain Name Analysis

The domain name 'txdotnow.servicenowservices.com' uses the commercial generic top-level domain (.com) and includes subdomain 'txdotnow'. The second-level label 'servicenowservices' is 18 characters long split between seven vowels and eleven consonants. Splitting it apart reveals 3 words: service, now, services. The median word length lands at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://txdotnow.servicenowservices.com

Page Load Overview

11.34s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:52 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical67% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
67%
government public service
59%
news media journalism
54%
government
48%
technology software
47%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9149.96.190.231United States
AS397182SERVICENOW, INC.
73.23.227.164Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
73.13.149.115Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
718.116.103.181Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
304--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T198C2F80A6C25C95280B3216DEA3EF34DBE2D50512308ECA8FBDD842C7785E9FC695DD6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:Dct1hrPPD3LLifjjOEccJ0gMGyOOuSQQWDuMxBgLPxkK2B:DckhYkK2B

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26934:R8kgAhCCSFoGUKUsIYOqoxII2hJCEG0niKCDAAIygoJWjykSJ2BRYQiEBkTQRBauABRhAYCAyIoCQAQkBIGUDCBbXGADREcl

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff
Perceptual Hash:a7272727070f0f0f
Difference Hash:c800000000000000
Wavelet Hash:27ffffff00000000
Color Hash:#ac8253

Other Hashes

Crop Resistant:c800000000000000

Scan History

Scan history not available

Unable to load historical scan data