Security Scan: Sign in

Summary

This website contacted 3 IPs in 2 countries across 3 domains to perform 20 HTTP transactions. The main domain is signin.spark.co.nz.

Submitted URL: https://www.spark.co.nz/cwa/openam/SSORedirect/metaAlias/Xtramail/idp1?SAMLRequest=hZLdahsxEIVfZdH9rryJvbGFbbDXLBiSNthtKL0pqjwhovqLZjab9ukrrdvg3qRXgpk5zPmOZonSmiA2PT25Azz3gFS8WuNQjI0V66MTXqJG4aQFFKTEcXN3K66qiQjRk1fesAvJ%2BwqJCJG0d6zY71bs2003ny6mXd3MJm3bLRY327ZebHfz6bbtmuZ6xooHiJjmVyzJkwixh71Dko5SaXLVlJNZWU8%2F1Y2o56K%2B%2FsqKXWLQTtKoeiIKKDgfhqHCIOOPSvnK%2FeJqkNwHSA758fjxACcdQRG3QHJjtET%2BhaK0UhuuT6FmResdQt75Hp06DwnVx5jeUttgtNLEis5HBWPIK%2FYoDUJGuU9p6Bd4q2z%2BhpOX9RbiEeKLVvD5cHsBAt%2Bzreo1%2BfvDYsEY73jwSAfAkE2w9TJ%2FhhjzimsZAvaaoMzFkoa45Jft5fkIPiSg%2Fe7eJ88%2Fs2Mr%2F8ObK%2FpUPo6jIhlyqBN3IkmGhjaCpERHsQfG1%2BeV%2F57a%2Bjc%3D&RelayState=https%3A%2F%2Fwebmail.xtra.co.nz%2Findex.cgi&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=oElft0UHSHpF4aQTa6RtO%2B%2B6R2O%2FjA9fFAySB9%2BEctITjghzn6c%2B2sGnoB45iM9lRI3whdWVc7RBhbOReq%2FpwZ%2FTyuCCLYP2uCfQ81mjXmUAW06DvhD6F0wBlOpWfyBGPMalxuLS0tT3l8BewhtzxxmueOkL%2B3tVIQGTMPpM8%2FRb3EFjm2BA3aPDCq0yYNUnB3KvOxAveJwM4hxDq3ipk1NY%2F9lFlHtwnQQsDJsuGbaijo%2BzZVKSpaBWFZKpsuG6KKhUWQwsxYbWe766M0AF1qmVAxTr2vlrM3mFVtaFAJwaGuhpMX%2BTdO0IgTpEBLSbpxIJg7%2Fu9E9MVwLsOerUdQ%3D%3D

Effective URL: https://signin.spark.co.nz/?goto=https://www.spark.co.nz/xtramail/checkcookies?spEntityID%3Dappsuite-saml-twr%26goto%3Dhttp://openam.internal.spark.co.nz:8080/openam/saml2/continue/metaAlias/Xtramail/idp1?secondVisitUrl%253D/SSORedirect/metaAlias/Xtramail/idp1?ReqID%25253D_7F8494F1650CCF997BC19BD84BCF6635%26AMAuthCookie%3D&brand=xtramailRedirected

The Cisco Umbrella rank of the primary domain is #416,869 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 90%

Risk Score

Site presents a credential‑phishing login for Xtra Mail on a low‑rank, unknown‑age domain with critical IDS alerts; treat as high‑risk and avoid.

Risk Factors

Low domain ranking for a claimed brand

Unknown domain age with credential collection

Critical IDS alerts indicating possible data exfiltration and C2 activity

Brand impersonation suspicion (Xtra Mail on a low‑rank domain)

Presence of password field without additional legitimate context

Domain age information unavailable

Details

Page Title

Scan Type

public

Language

🇺🇸

English

(54% confidence)

Screenshot

Page Load Overview

6.35s

Total Load Time

HTTP Requests

Domains

164 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:54%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:54%

Script Type:Latin

Text Length:187 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical29% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

29%

technology software

27%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	34.160.81.0	Kansas City, Missouri, United States	AS396982Google LLC
6	66.22.91.48	Auckland, Auckland, New Zealand	AS48851Radware Ltd
6	66.22.91.1	Auckland, Auckland, New Zealand	AS48851Radware Ltd
20	3	-	-