Security Scan Report: caterpillar-sso-qa.netdocssafe.co.uk

Redirected to: https://login.microsoftonline.com/ceb177bf-013b-49ab-8a9c-4abce32afc1e/oauth2/authorize?client_id=a20456d5-a9d5-4081-bab0-0e09f7c43834&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DYdKknvatj9VZyKrBQRr13qpY-ZpbI-WiC-bUozFnocVjSOMVuTWpXSAsF1D-KLzl_kKyXckbATxW6k9v1_lB6KWqMhnaIrfYmwkrD34A_YOhNaxsneAVThfnPooPs9gvv-nBwvk6PUlaG6-wRP-29POeYLo&response_mode=form_post&nonce=639076369538572386.ODRkYWI4OGUtNTk2MC00MzczLTgyMTctMDRmMmE5MzM2ZTE3YTFkY2ViMTgtN2ZmYS00ODIyLTg5MTItNWU5NmFkZGM5YjE5&x-client-SKU=ID_NET461&x-client-ver=6.7.1.0&sso_reload=true

Site favicon
Submitted: Feb 25, 2026, 5:22:30 PMCompleted: Feb 25, 2026, 5:23:45 PMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 4 countries across 6 domains to perform 32 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://caterpillar-sso-qa.netdocssafe.co.uk/

Effective URL: https://login.microsoftonline.com/ceb177bf-013b-49ab-8a9c-4abce32afc1e/oauth2/authorize?client_id=a20456d5-a9d5-4081-bab0-0e09f7c43834&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DYdKknvatj9VZyKrBQRr13qpY-ZpbI-WiC-bUozFnocVjSOMVuTWpXSAsF1D-KLzl_kKyXckbATxW6k9v1_lB6KWqMhnaIrfYmwkrD34A_YOhNaxsneAVThfnPooPs9gvv-nBwvk6PUlaG6-wRP-29POeYLo&response_mode=form_post&nonce=639076369538572386.ODRkYWI4OGUtNTk2MC00MzczLTgyMTctMDRmMmE5MzM2ZTE3YTFkY2ViMTgtN2ZmYS00ODIyLTg5MTItNWU5NmFkZGM5YjE5&x-client-SKU=ID_NET461&x-client-ver=6.7.1.0&sso_reload=trueRedirected

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Phishing page impersonating Caterpillar login; avoid and report.

Risk Factors
Brand impersonation (Caterpillar) on an unrelated domain
Cross‑origin credential form (email + password) to external Microsoft login
Unranked domain in Cisco Umbrella
Login form on a domain that does not match the brand
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

The domain 'caterpillar-sso-qa.netdocssafe.co.uk' uses the United Kingdom country-code top-level domain (.co.uk) and includes subdomain 'caterpillar-sso-qa'. Its registrable label 'netdocssafe' stretches across 11 characters containing four vowels alongside seven consonants. Splitting it apart reveals 3 words: net, docs, safe. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://caterpillar-sso-qa.netdocssafe.co.uk/

Page Load Overview

1.91s
Total Load Time
15
HTTP Requests
6
Domains
450 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:99 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
313.107.246.44Netherlands
323.53.42.146United States
351.104.28.67London, England, United Kingdom
AS8075Microsoft Corporation
320.190.160.65SwedenUnknown
320.190.160.20United KingdomUnknown
155--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T141836DDA7FE22933868945B5B0B67E069A7A5D03894CCDA4F15CCD882FFB74D4127603

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:jc8GLGGfdubHAVx8xGoIyEk77gx2xpTvPoMmCBDEKqriiHACC:Q8O4TAVGxGJ32RALACC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:85611:ooRpSCOSghRCLShVCQUAMicQQxgE84AyAygDnIRFSMC0JwBgshBJMgoHTkBQpKSAQ4CGgQGBUUCh05IGZBEqhm5RcwIGIGRE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7eff7ffff00
Perceptual Hash:b3b308cc4cb333e6
Difference Hash:08304a4825080001
Wavelet Hash:fcfcc4ccd0c8c000
Color Hash:#6ce0dc

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data