ScanMalware.com

Security Scan Report: www.spark.co.nz

Redirected to:
https://signin.spark.co.nz/?goto=https://www.spark.co.nz/xtramail/chec...
Site favicon
Submitted: May 14, 2026, 8:34:14 PMCompleted: May 14, 2026, 8:35:51 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 2 countries across 3 domains to perform 20 HTTP transactions. The main domain is signin.spark.co.nz.

Submitted URL: https://www.spark.co.nz/cwa/openam/SSORedirect/metaAlias/Xtramail/idp1?SAMLRequest=hZJbb9swDIX%2FiqF3W3Zu64QkgONkQIBuK5JuGPZSaAqLCtNtIl13%2B%2FWVnHbIXronAYc84PkoLlFaE0Tb04M7wK8ekIonaxyKsbBifXTCS9QonLSAgpQ4th%2BvxaSqRYievPKGXVjedkhEiKS9Y8V%2Bu2J3u3b2brF433ab6a6uF1fTZt4lqWt2m2Yzn16x4itETP0rluzJhNjD3iFJR0mqJ4uynpfN7HZSi%2BlMNJPvrNgmBu0kja4HooCC82EYKgwy%2FqyUr9wfrgbJfYCUkB%2BPnw9w0hEUcQskW6Ml8m8UpZXacH0KDSs67xDyzLfo1LlJqD7G9JbaBqOVJlZ88FHBuOQVu5cGIaPcpG3oR%2FirtK%2FLycN6C%2FEI8VEr%2BHK4vgCBHzlW9ZTyvbBYMMY7HjzSATDkEGy9zJ8hxn3FtQwBe01QZrGkIS75ZXl5PoJPCWi%2FvfEp8%2B%2Bc2Mr%2F8GZFn8r7sVWkQA514k4kKdDQRZCU6Cj2wPj6PPLfU1s%2FAw%3D%3D&RelayState=https%3A%2F%2Fwebmail.xtra.co.nz%2Findex.cgi&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=Pdxdw7hLXMB%2FjYTvR4Bq4P2URAo%2BO3XDXr0bLomliKbWxy3px%2FPmBh5nQRtg8EhEt7gKjDGw3Fkyys6EBUuG8rB7TIdfSHC%2F0zjByrrHIx52p8oMeTEXiGkKWG4%2BpSdSVtDeAZnNeZNp3FQOsMU3PRGzADcGpthJnc%2Fxt%2BtswSTMsVQfTtrOOrB%2F4me9LI0zl9TczJZA9eyEMXBA36%2FTms8fiYLcLRHR3evWeSKmid5HnOsXgUXNRd2HvP3T3SE5nXpvlA%2Fkqdd912TyQcCNbQnhmgYcjxSuCHN3xWPsDUYoGZxWTJNzTksxZcgtBHtL7shzLDbcAr2RgOPu%2FoQd0Q%3D%3D

Effective URL: https://signin.spark.co.nz/?goto=https://www.spark.co.nz/xtramail/checkcookies?spEntityID%3Dappsuite-saml-twr%26goto%3Dhttp://openam.internal.spark.co.nz:8080/openam/saml2/continue/metaAlias/Xtramail/idp1?secondVisitUrl%253D/SSORedirect/metaAlias/Xtramail/idp1?ReqID%25253D_EA47669ACB3E0068315CA47C1EB1B538%26AMAuthCookie%3D&brand=xtramailRedirected

The Cisco Umbrella rank of the primary domain is #416,869 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 86%

10
Risk Score

High risk site with credential phishing indicators and critical IDS alerts; avoid interaction and report.

Risk Factors
Low domain ranking for a well‑known brand
Unknown domain age combined with credential form
Critical IDS alerts indicating possible data exfiltration and C2 activity
Brand claim on a domain not in top 10K (potential typosquatting)
Presence of a login form without clear legitimate context
Domain age information unavailable

Details

Page Title

Sign in

Scan Type

public

Language

🇺🇸

English

(54% confidence)

Category

healthcare medical

(29%)

Domain Information

You're looking at domain 'www.spark.co.nz' on the New Zealand country-code top-level domain (.co.nz); it also runs on subdomain 'www'. Count 5 characters in 'spark' with one vowel and 4 consonants. It segments into 1 word: spark. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.spark.co.nz/cwa/openam/SSORedirect/metaAlias/Xtramail/idp1?SAMLRequest=hZJbb9swDIX%2FiqF3W3Zu64QkgONkQIBuK5JuGPZSaAqLCtNtIl13%2B%2FWVnHbIXronAYc84PkoLlFaE0Tb04M7wK8ekIonaxyKsbBifXTCS9QonLSAgpQ4th%2BvxaSqRYievPKGXVjedkhEiKS9Y8V%2Bu2J3u3b2brF433ab6a6uF1fTZt4lqWt2m2Yzn16x4itETP0rluzJhNjD3iFJR0mqJ4uynpfN7HZSi%2BlMNJPvrNgmBu0kja4HooCC82EYKgwy%2FqyUr9wfrgbJfYCUkB%2BPnw9w0hEUcQskW6Ml8m8UpZXacH0KDSs67xDyzLfo1LlJqD7G9JbaBqOVJlZ88FHBuOQVu5cGIaPcpG3oR%2FirtK%2FLycN6C%2FEI8VEr%2BHK4vgCBHzlW9ZTyvbBYMMY7HjzSATDkEGy9zJ8hxn3FtQwBe01QZrGkIS75ZXl5PoJPCWi%2FvfEp8%2B%2Bc2Mr%2F8GZFn8r7sVWkQA514k4kKdDQRZCU6Cj2wPj6PPLfU1s%2FAw%3D%3D&RelayState=https%3A%2F%2Fwebmail.xtra.co.nz%2Findex.cgi&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=Pdxdw7hLXMB%2FjYTvR4Bq4P2URAo%2BO3XDXr0bLomliKbWxy3px%2FPmBh5nQRtg8EhEt7gKjDGw3Fkyys6EBUuG8rB7TIdfSHC%2F0zjByrrHIx52p8oMeTEXiGkKWG4%2BpSdSVtDeAZnNeZNp3FQOsMU3PRGzADcGpthJnc%2Fxt%2BtswSTMsVQfTtrOOrB%2F4me9LI0zl9TczJZA9eyEMXBA36%2FTms8fiYLcLRHR3evWeSKmid5HnOsXgUXNRd2HvP3T3SE5nXpvlA%2Fkqdd912TyQcCNbQnhmgYcjxSuCHN3xWPsDUYoGZxWTJNzTksxZcgtBHtL7shzLDbcAr2RgOPu%2FoQd0Q%3D%3D

Page Load Overview

5.88s
Total Load Time
20
HTTP Requests
3
Domains
164 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:54%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:54%
Script Type:Latin
Text Length:187 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical29% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
29%
technology software
27%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
866.22.91.48Auckland, Auckland, New Zealand
AS48851Radware Ltd
666.22.91.1Auckland, Auckland, New Zealand
AS48851Radware Ltd
634.160.81.0Kansas City, Missouri, United States
AS396982Google LLC
203--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13763C7CA1530A28815CFE54EDF6FEEC8101B605BE9A2D5C17AEE8B0C5B8BED4FD41844

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:u1rCgO/fvJfAwkZNKZoBz7qawqh0QKoZCktWnBo2rTbFDqJuKqv5qwqaiYPolP3:u14/VInr7qa1ZI42rZR0HaiYPolf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:70628:ISAZGAI4aV6QDCcwuQw+QgmKEpLgYRGGOSDpEFSgIQgQkDyQKUBJA4UJBqAIhKAAJAAooyaTAENAIhAgMZAiKJVuYHMddJQS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1018181818180000
Perceptual Hash:8dc877227626dc27
Difference Hash:b2b2b2b2b3b34326
Wavelet Hash:18181819191b83c7
Color Hash:#3f783a

Other Hashes

Crop Resistant:fa78c2e8b0b28e8e,b2b2b2b2b3b34326

Scan History

Scan history not available

Unable to load historical scan data