ScanMalware.com

Security Scan Report: ayrtni1sr.accounts.ondemand.com

Redirected to:
https://ayrtni1sr.accounts.ondemand.com/saml2/idp/sso?sp=sp.accounts.s...
Site favicon
Submitted: Jul 1, 2026, 4:44:49 AMCompleted: Jul 1, 2026, 4:45:59 AMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is ayrtni1sr.accounts.ondemand.com and was registered NaN years ago.

Submitted URL: https://ayrtni1sr.accounts.ondemand.com

Effective URL: https://ayrtni1sr.accounts.ondemand.com/saml2/idp/sso?sp=sp.accounts.sap.com&RelayState=https://ayrtni1sr.accounts.ondemand.com/ui/protected/profilemanagementRedirected

The Cisco Umbrella rank of the primary domain is #8,485 of the top 1 million websitesTop 10K Site

AI Security Verdict

Low Risk

Confidence: 88%

3
Risk Score

Page hosts a credential login form while impersonating the Bechtle brand on an unrelated domain, indicating high‑risk phishing.

Risk Factors
Brand impersonation (different entity's brand shown on unrelated domain)
Credential collection form on third‑party SSO subdomain
Safety Factors
Domain age > 10 years and reputable registration date
Cisco Umbrella ranking within top 10 000
No malicious IoC, YARA, or network IDS alerts
No evidence of credential exfiltration or external form submission
Top-ranked domain (Cisco Umbrella #8,485, 10795 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 8 to 3
Domain age information unavailable

Details

Page Title

User Profile: Log On

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

news media journalism

(31%)

Domain Information

Domain 'ayrtni1sr.accounts.ondemand.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'ayrtni1sr.accounts'. The registrable portion 'ondemand' spans 8 characters containing 3 vowels alongside 5 consonants. It segments into 2 words: on, demand. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ayrtni1sr.accounts.ondemand.com

Page Load Overview

1.09s
Total Load Time
8
HTTP Requests
1
Domains
305 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:104 chars
Detector Agreement:50%

Website Classification

Primary Category

news media journalism31% confidence
Type: webapp
Method: ml+structural

All Detected Categories

news media journalism
31%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8130.214.144.214United States
AS35039SAP SE
81--

Detected Technologies2

PasswordField
100%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T112228734A8306D3B1597BAE835E4DE0B7B8BC109CF02585479BC5BD40BA7E814A3F9B5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:sGDdKom7mo6xhSXv+JZoaPm0oM8hB6rst6jbFlEvyL:sWw3SlxUXv+JZoaPm0W6rstebFlEvyL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10259:AJGAUSAUWADggEmBKqwIWROCB4sA2msmECsAIMymggEIJSqh0IWEgxUIiCo9AkHdSgBCEEKiQwCgAC9AKTBAUEOFBFHREaKF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3c3f3c3cfffffff
Perceptual Hash:e466939b9b6464cc
Difference Hash:0c0e041410000000
Wavelet Hash:c3c3e3c3d0f0f0f0
Color Hash:#c58787

Other Hashes

Crop Resistant:0c0e041410000000

Scan History

Scan history not available

Unable to load historical scan data