Security Scan: ServiceNow

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f9bbaa59-b129-4a80-b119-f82e7c9d57c1 Domain and IP registration (RDAP)/api/v1/rdap/f9bbaa59-b129-4a80-b119-f82e7c9d57c1How often this domain was scanned/api/v1/domain/stats/clr.service-now.com Scan history for this domain/api/v1/domain/history/clr.service-now.com?limit=15

This website contacted 11 IPs in 4 countries across 8 domains to perform 45 HTTP transactions. The main domain is service-now.com and was registered 25 years ago.

Submitted URL: https://clr.service-now.com

Effective URL:

https://login.microsoftonline.com/c505a745-50c6-477f-a110-7be89b513acc...

Redirected

The Cisco Umbrella rank of the primary domain is #2,165 of the top 1 million websitesTop 10K Site

AI Security Verdict

Low Risk

Confidence: 95%

Risk Score

Legitimate ServiceNow SAML SSO redirect to Microsoft login; no phishing or malware evidence. The lone high IDS alert appears unrelated/false-positive, but warrants network review.

Risk Factors (1)

Suricata HIGH alert: ET ATTACK_RESPONSE PowerShell NoProfile Command Received In Powershell Stagers (Potentially Bad Traffic) — likely false positive/unrelated network artifact in this legitimate SSO context

Safety Factors (5)

Official Microsoft login domain

Legitimate SAML SSO redirect

No credential exfiltration detected

No Indicators of Compromise or YARA malware matches

Established entry domain (24 years old, top 10K Umbrella ranking)

Domain age information unavailable

Details

Page Title

ServiceNow

Scan Type

public

Favicon Hash

MMH3: -2057558656

MD5: 12e3dac858061d088023b2bd48e2fa96

Domain Name Analysis

The domain 'clr.service-now.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'clr'. Count 11 characters in 'service-now' split between four vowels and six consonants; it also includes 1 hyphen. Word splitting yields 2 words: service, now. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.74s

Total Load Time

1.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:109 chars

Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence

Type: webapp

Method: structural

All Detected Categories

No categories detected

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	149.96.248.235	United States	AS16839SERVICENOW, INC.
4	20.190.160.130Office365 · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
4	13.107.246.44Azure · CLOUD	United States	AS8075Microsoft Corporation
4	20.190.160.22Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
4	2.21.239.158Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
4	2.21.239.135Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
4	20.190.159.71Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
4	13.107.246.60Azure · CLOUD	United States	AS8075Microsoft Corporation
4	40.126.31.73Office365 · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
4	20.190.160.3Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
45	11	-	-