Security Scan Report: ice.service-now.com

Redirected to: https://login.microsoftonline.com/f92659f6-4a91-457a-9aac-df071c834cc4/saml2?SAMLRequest=jVLLbtswEPwVgXe9qEciwjKg2ihqIE2N2O2hN4pcOQQoUuVSTvv3VWgXSQ81euRydmZ2dlfIR00n1s3%2B2TzBjxnQRz9HbZBdfloyO8MsR4XM8BGQecEO3ecHRpOMTc56K6wmUYcIzitrNtbgPII7gDsrAV%2BfHlry7P2ELE2Xd4KXemzsSyLsmBp%2BnvgJEmlJtF3UleGvNG9N2p6USUYlnEU7eGu0MhBah4bWVTPUccmbPC6rOx43nItYDtldLu6LUogyDWOQ6KN1AsKULRm4RiDRbtuSw%2BMGelHnZUWpoEXTV1nd17K6l1kj%2B7yWYliAuOeI6gxvrYgz7Ax6bnxLaEbrOCvivDjSjBUNK5ZsaPGdRPtrPh%2BUkcqcbofZX0DIPh2P%2B3j%2F5XAMBGclwT0u6P%2FP8Rs4DBkutGS9ChGw4Nm9X%2B5tO%2FzPRsn6hu4qfc9%2B1ZrYq9%2Fddm%2B1Er%2BiTmv7snHA%2FTKDdzOEdYzc%2F9tAnuShomQ8BCiDkSvdSekAkaTrq%2B7fl7v%2BDQ%3D%3D&RelayState=https%3A%2F%2Fice.service-now.com%2Fnavpage.do&sso_reload=true

Submitted: Mar 13, 2026, 8:39:29 PMCompleted: Mar 13, 2026, 8:40:46 PMpubliccompleted
Loading additional data...

Summary

This website contacted 7 IPs in 4 countries across 8 domains to perform 72 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://ice.service-now.com

Effective URL: https://login.microsoftonline.com/f92659f6-4a91-457a-9aac-df071c834cc4/saml2?SAMLRequest=jVLLbtswEPwVgXe9qEciwjKg2ihqIE2N2O2hN4pcOQQoUuVSTvv3VWgXSQ81euRydmZ2dlfIR00n1s3%2B2TzBjxnQRz9HbZBdfloyO8MsR4XM8BGQecEO3ecHRpOMTc56K6wmUYcIzitrNtbgPII7gDsrAV%2BfHlry7P2ELE2Xd4KXemzsSyLsmBp%2BnvgJEmlJtF3UleGvNG9N2p6USUYlnEU7eGu0MhBah4bWVTPUccmbPC6rOx43nItYDtldLu6LUogyDWOQ6KN1AsKULRm4RiDRbtuSw%2BMGelHnZUWpoEXTV1nd17K6l1kj%2B7yWYliAuOeI6gxvrYgz7Ax6bnxLaEbrOCvivDjSjBUNK5ZsaPGdRPtrPh%2BUkcqcbofZX0DIPh2P%2B3j%2F5XAMBGclwT0u6P%2FP8Rs4DBkutGS9ChGw4Nm9X%2B5tO%2FzPRsn6hu4qfc9%2B1ZrYq9%2Fddm%2B1Er%2BiTmv7snHA%2FTKDdzOEdYzc%2F9tAnuShomQ8BCiDkSvdSekAkaTrq%2B7fl7v%2BDQ%3D%3D&RelayState=https%3A%2F%2Fice.service-now.com%2Fnavpage.do&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #2,165 of the top 1 million websitesTop 10K Site

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

Legitimate SSO login page; no malicious activity detected.

Safety Factors
Well‑established domain with long registration history
Top‑10K Cisco Umbrella ranking indicating high reputation
Cross‑origin form submits to a legitimate Microsoft authentication endpoint
No malicious Indicators of Compromise or JavaScript malware found
Standard SSO flow (ServiceNow → Azure AD) observed
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

The domain 'ice.service-now.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'ice'. The core label 'service-now' covers 11 characters split between 4 vowels and 6 consonants, notching one hyphen. Tokenizing the label suggests two words: service, now. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ice.service-now.com

Page Load Overview

6.26s
Total Load Time
56
HTTP Requests
6
Domains
489 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:109 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
840.79.167.8Ireland
840.126.31.130Germany
8148.139.122.152United States
AS16839SERVICENOW, INC.
840.126.32.74Amsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
82.16.241.211UnknownUnknown
813.107.246.44United States
AS8075Microsoft Corporation
820.190.159.2UnknownUnknown
567--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T117835BDA7E721937838A55B9B5B67D029A7A59038D88CC60F09CC9983FF774D8037607

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:j28GLG2VdPDYoIyEk77gx2xpTvPoMmCB/EXgDikC:q8g7YJ32RA2C

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:80764:IAaiACMwZod1SAgYMCBMCAgKCGAShAKSEIOWCoMMgICMIMqZgs2NTiClHAIBs+szeABIMWAEDAAFBANEYMgW4ZgQKCBAmBMA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:8cd93726dc9989cc
Difference Hash:100cb2b2b2f26c61
Wavelet Hash:00001c1c18180001
Color Hash:#52862d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data