Security Scan Report: fidelity.service-now.com

Redirected to: https://login.microsoftonline.com/7521acbc-a68c-41e5-a975-1cf83066dd19/saml2?SAMLRequest=jVJdb9sgFP0rFu%2B2MakdB8WRskTTInWd1WR92BvBlxYJg8fF6frv55BM7R7W7pV77vm6LFH0hg18PYYnew8%2FR8CQ%2FOqNRX6ZNGT0ljuBGrkVPSAPku%2FXX285yygfvAtOOkOSNSL4oJ3dOItjD34P%2FqQlfL%2B%2FbchTCAPyPFe6A6PDS4aXYWrdcyZdT5LtpKutOBO8wo171DbrtfQOnQrOGm3hjM%2FnJSuEPMpUVLVMbwooU7GYl2khVT2jVdV1xSKPAUjy2XkJMV9DlDAIJNltG7K%2F2xSyK9X8RhUFA1GrUsiFqmtKj6w8QsXkBMRWIOoTvK4ijrCzGIQNDWGUVSmdpYweGOWzktMyY%2FPFD5K012Y%2Badtp%2B%2Fh%2BjccLCPmXw6FN22%2F7QyQ4TXX5uwn9Pw0%2BgMfY3kRIVssYnke3%2Fu1B3zci%2FlyRrD5SXOZvJa6CAz%2Fb3W1bZ7R8SdbGuOeNBxGmCMGPEK%2FRi%2FBvF0VWxBfdpSpC%2BWhxAKmVho7kq6vs3z929Rs%3D&RelayState=https%3A%2F%2Ffidelity.service-now.com&sso_reload=true

Submitted: Mar 20, 2026, 8:35:02 PMCompleted: Mar 20, 2026, 8:36:17 PMpubliccompleted
Loading additional data...

Summary

This website contacted 6 IPs in 3 countries across 6 domains to perform 1 HTTP transaction. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://fidelity.service-now.com

Effective URL: https://login.microsoftonline.com/7521acbc-a68c-41e5-a975-1cf83066dd19/saml2?SAMLRequest=jVJdb9sgFP0rFu%2B2MakdB8WRskTTInWd1WR92BvBlxYJg8fF6frv55BM7R7W7pV77vm6LFH0hg18PYYnew8%2FR8CQ%2FOqNRX6ZNGT0ljuBGrkVPSAPku%2FXX285yygfvAtOOkOSNSL4oJ3dOItjD34P%2FqQlfL%2B%2FbchTCAPyPFe6A6PDS4aXYWrdcyZdT5LtpKutOBO8wo171DbrtfQOnQrOGm3hjM%2FnJSuEPMpUVLVMbwooU7GYl2khVT2jVdV1xSKPAUjy2XkJMV9DlDAIJNltG7K%2F2xSyK9X8RhUFA1GrUsiFqmtKj6w8QsXkBMRWIOoTvK4ijrCzGIQNDWGUVSmdpYweGOWzktMyY%2FPFD5K012Y%2Badtp%2B%2Fh%2BjccLCPmXw6FN22%2F7QyQ4TXX5uwn9Pw0%2BgMfY3kRIVssYnke3%2Fu1B3zci%2FlyRrD5SXOZvJa6CAz%2Fb3W1bZ7R8SdbGuOeNBxGmCMGPEK%2FRi%2FBvF0VWxBfdpSpC%2BWhxAKmVho7kq6vs3z929Rs%3D&RelayState=https%3A%2F%2Ffidelity.service-now.com&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #2,165 of the top 1 million websitesTop 10K Site

AI Security Verdict

High Risk

Confidence: 82%

7
Risk Score

Impersonates Fidelity login and harvests credentials on a non‑official domain – likely phishing.

Risk Factors
Cross‑origin credential submission to an external identity provider
Brand impersonation (Fidelity) on a non‑official domain
Login form collecting credentials
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

You're looking at domain 'fidelity.service-now.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'fidelity'. The second-level label 'service-now' is 11 characters long split between 4 vowels and 6 consonants; it also includes 1 hyphen. Breaking it apart gives two words: service, now. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fidelity.service-now.com

Page Load Overview

6.89s
Total Load Time
41
HTTP Requests
5
Domains
543 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:109 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1113.107.246.45United States
613.107.246.44United States
AS8075Microsoft Corporation
623.207.210.132Germany
6149.96.21.211United States
AS16839SERVICENOW, INC.
620.190.159.73Dublin, Leinster, Ireland
AS8075Microsoft Corporation
620.190.160.20UnknownUnknown
416--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11E736BD97FA22937824A01B5B5B56E02AB3A59038C4CCDA0F19CCD842FFB79D8137657

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:jI8GLG2TIqdqcoIyEk77gx2xpTvPoMmCBGEeZIiVtC:c8AacJ32RAxC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:79727:VcECQgwApsKjo0IAQIEOkrgkIAoQuSQcA4DI2YAYyFmF4g0mSJKCHFKHBmQMn1YmSkISwTCFjb6Kgaw8AEyFYxfFAAACFSBh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0010293b3737373f
Perceptual Hash:875970664c99736e
Difference Hash:88e4dad3e5e6e6e6
Wavelet Hash:00202b3b373f373f
Color Hash:#1f9323

Other Hashes

Crop Resistant:88e4dad3e5e6e6e6

Scan History

Scan history not available

Unable to load historical scan data