Security Scan: Sign in

Summary

This website contacted 3 IPs in 2 countries across 3 domains to perform 20 HTTP transactions. The main domain is signin.spark.co.nz.

Submitted URL: https://www.spark.co.nz/cwa/openam/SSORedirect/metaAlias/Xtramail/idp1?SAMLRequest=hZLdbtswDIVfxdC9Lceds0JIAjjxCgTo2iJph2E3g6awqDD9TaTrtk9fydmK9Ka7EkDygOc74gKlNUF0Az24HfwZAKl4ssahmBpLNkQnvESNwkkLKEiJfff1UjRVLUL05JU37ETysUIiQiTtHSu2%2FZL9vDjfdPP%2By%2Bd5c1av113XfGrPZvW8qfv1pluft6z4BhHT%2FJIleRIhDrB1SNJRKtXNvKzbsqlvZ41oWjFrf7CiTwzaSZpUD0QBBefjOFYYZPxdKV%2B5F65GyX2A5JDv99c7OOgIirgFkp3REvl3itJKbbg%2BhBkrNt4h5J0f0anjkFBDjOkttQ1GK02suPBRwRTykt1Lg5BRblIa%2BhHeKt2%2FcPKywULcQ3zUCu52lycg8Cvbqp6Sv78sFozxjgePtAMM2QRbLfJniCmvuJIh4KAJylwsaYwLftpeHI%2FgKgFt%2BxufPD9nx1b%2BhzdX9KG8n0ZFMuRQJ%2B5EkgyNmwiSEh3FARhfHVe%2BP7XVKw%3D%3D&RelayState=https%3A%2F%2Fwebmail.xtra.co.nz%2Findex.cgi&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=korI%2FoGWGV2og5G6vtXipo9Ph0cfADDDU38kgfS9axMh3OnRqOrHxJ1ndueDgM7COCnHyuwzwPXxA6M47KtOW0uKPbkD2iJsGwNs9gRpB6AzYEk1PL6RZtNcz1yG0gjpKvVkMoGjnmjOLOsakvBmDgN0N8A11h1ItE%2FRPTERrvFF9Rds520G8m2fJo8FMqbM6egyo2EHYRV4TZNGkty42fn5R5%2FvC5sSHr%2B0%2F80rvUmkBY12k3bt1icpduNi7oB2VmyMWyZqurL%2FAmsZA1xYd7Un%2B4ohydixkqHV2A7zWctl7fjjrj%2BuTZySeUKhrLRSaRqd5gVPEBtJKE4ABZ5%2Fwg%3D%3D

Effective URL: https://signin.spark.co.nz/?goto=https://www.spark.co.nz/xtramail/checkcookies?spEntityID%3Dappsuite-saml-twr%26goto%3Dhttp://openam.internal.spark.co.nz:8080/openam/saml2/continue/metaAlias/Xtramail/idp1?secondVisitUrl%253D/SSORedirect/metaAlias/Xtramail/idp1?ReqID%25253D_F8CA6DE76230BBAA245310620DBCAB85%26AMAuthCookie%3D&brand=xtramailRedirected

The Cisco Umbrella rank of the primary domain is #416,869 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 78%

Risk Score

The page appears to be a legitimate Spark Xtra Mail login, but unknown domain age and low ranking suggest cautious use.

Risk Factors

Domain age unknown (treated as potentially new)

Cisco Umbrella ranking is low (416,869) for a claimed well‑known brand

Presence of function() constructor calls (suspicious code generation)

Safety Factors

Brand matches the official domain (Spark owns Xtra Mail)

No external malicious links or redirects

No credential exfiltration detected

No IDS/Suricata alerts

Form uses standard password and email fields without hidden credential fields

Domain age information unavailable

Details

Page Title

Scan Type

public

Language

🇺🇸

English

(54% confidence)

Screenshot

Page Load Overview

23.32s

Total Load Time

HTTP Requests

Domains

164 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:54%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:54%

Script Type:Latin

Text Length:187 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical29% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

29%

technology software

27%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	66.22.91.48	Auckland, Auckland, New Zealand	AS48851Radware Ltd
6	34.160.81.0	Kansas City, Missouri, United States	AS396982Google LLC
6	66.22.91.1	Auckland, Auckland, New Zealand	AS48851Radware Ltd
20	3	-	-