Security Scan Report: secsupportprd.service-now.com

Site favicon
Submitted: Dec 21, 2025, 3:57:21 AMCompleted: Dec 21, 2025, 3:57:53 AMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 125 HTTP transactions. The main domain is secsupportprd.service-now.com and was registered NaN years ago.

Submitted URL: https://secsupportprd.service-now.com

The Cisco Umbrella rank of the primary domain is #2,165 of the top 1 million websitesTop 10K Site

AI Security Verdict

High Risk

Confidence: 80%

7
Risk Score

Potential phishing page impersonating IBM on a ServiceNow subdomain.

Risk Factors
Brand impersonation (IBM brand on non‑official domain)
Credential harvesting form (password fields) on third‑party domain
Domain age information unavailable

Details

Page Title

Log in | MSS Prod

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(75%)

Domain Information

The domain 'secsupportprd.service-now.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'secsupportprd'. The registrable portion 'service-now' spans 11 characters with 4 vowels and six consonants; it also includes one hyphen. Tokenizing the label suggests two words: service, now. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://secsupportprd.service-now.com

Page Load Overview

4.83s
Total Load Time
125
HTTP Requests
1
Domains
88 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:1,248 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software75% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
75%
documentation technical
50%
government public service
49%
corporate business
36%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
125149.96.234.162United States
1251--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FC433916ADA8CC7B8037219DD438F1BD721D4126A71CE898FFBC561C2B95FCB89094E9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:+sl/on10Dtm9g4kxwY8uHNB3VgyLtA97jxZbmt+VAOHXw+rYyhP3OhNofSKTNdok:bFt+Hei2y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:58149:kGB6FXAohII0SkoDESUAgQolHAQ6KwQDLIKg+9UyJAGogIjONRGQJHBgRIg4AQkikK4xiAZAGMLF8KrgUAgEabKEBGIIIAKN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:001818181818dadb
Perceptual Hash:d94c763326666633
Difference Hash:33333333333232b2
Wavelet Hash:0018181818ffffff
Color Hash:#79d2b0

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data