No Security Risks Detected
This domain appears to be safe and secure
70%
Score
Disclaimer: This assessment is based on automated analysis of publicly available information. Results are for informational purposes only. For critical applications, consult security professionals.
Scan Information
Last checked:July 25, 2025 11:34:41
Target URL:https://login.salesforce.com/
Scan Complete
Refresh page after 10 minutes
for updated results
Page Information
Target URL
https://login.salesforce.com/
Page Title
Login | Salesforce
Status
Active
Host Information
Domain
login.salesforce.com
Server
N/A
Country
Japan
IP Address
104.161.180.2
ASN Information
14340
SALESFORCE
Technologies
HSTS
Security
SSL Certificate
HTTPS Enabled
Secure
Certificate Issuer
49m295 Gateway Proxy BISO MITM CA
Valid From
2025-07-20 02:23:58
Valid Until
2025-08-19 02:24:28
Subject Name
login.salesforce.com
Performance Statistics
15
Total Requests
2
Domains
2
IP Addresses
75.35 KB
Transfer Size
Content Size136.78 KB
HTTP Headers
Cache-Control
no-cache,must-revalidate,max-age=0,no-store,private
Cf-Team
28e2f6757e000070e91be3c400000001
Content-Encoding
gzip
Content-Security-Policy
upgrade-insecure-requests
frame-ancestors 'none'
Content-Security-Policy-Report-Only
default-src 'self'; script-src 'self' *.salesforce.com 'report-sample'; style-src 'unsafe-inline' 'self' *.file.force.com *.salesforce.com *.visualforce.com:*; img-src *.force.com slack-mil-dev.com slack-imgs-mil-dev.com 'self' *.slack.com *.amazonaws.com blob: *.my-salesforce-cms.com *.slack-imgs.com slack-imgs-gov.com *.slack-edge.mil *.salesforce-experience.com slack-imgs.com slack-gov-dev.com *.sfdcstatic.com *.slack-edge-gov.com *.salesforce.com *.twimg.com *.my-salesforce.com slack-imgs-gov-dev.com *.slack-edge.com slack-imgs.mil *.cloudinary.com data:; media-src 'self' *.salesforce.com; frame-src *.force.com *.quip.com *.arkoselabs.com 'self' *.youtube-nocookie.com *.youtube.co.uk *.cybersource.com *.youtube.com.br *.youtube.es *.salesforce-experience.com *.salesforceliveagent.com *.adis.ws *.sfdcfc.net *.youtube.ca *.youtube.ie *.cloudinary.com *.vidyard.com *.vimeo.com *.youtube.jp bcove.video *.youtube.fr *.forceusercontent.com *.youtube.com *.brightcove.net *.wistia.net *.salesforce.com *.youtube.nl *.youtube.pl; font-src *.force.com 'self' *.salesforce.com blob: data:; connect-src 'self' *.amazonaws.com *.salesforce.com api.salesforce.com *.api.salesforce.com wss://*.slack.com; report-to sfdc-csp-ep; report-uri https://csp-report.force.com/_/ContentDomainCSPNoAuth?type=login
Content-Type
text/html; charset=UTF-8
Date
Fri, 25 Jul 2025 11:34:55 GMT
Expires
Thu, 01 Jan 1970 00:00:00 GMT
Origin-Trial
AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Referrer-Policy
origin-when-cross-origin
Server-Timing
cfReqDur;dur=782.243
Strict-Transport-Security
max-age=63072000; includeSubDomains
Transfer-Encoding
chunked
Vary
Accept-Encoding
X-Content-Type-Options
nosniff
X-FRAME-OPTIONS
DENY
Cache-Control
no-cache,must-revalidate,max-age=0,no-store,private
Cf-Team
28e2f6757e000070e91be3c400000001
Content-Encoding
gzip
Content-Security-Policy
upgrade-insecure-requests
frame-ancestors 'none'
Content-Security-Policy-Report-Only
default-src 'self'; script-src 'self' *.salesforce.com 'report-sample'; style-src 'unsafe-inline' 'self' *.file.force.com *.salesforce.com *.visualforce.com:*; img-src *.force.com slack-mil-dev.com slack-imgs-mil-dev.com 'self' *.slack.com *.amazonaws.com blob: *.my-salesforce-cms.com *.slack-imgs.com slack-imgs-gov.com *.slack-edge.mil *.salesforce-experience.com slack-imgs.com slack-gov-dev.com *.sfdcstatic.com *.slack-edge-gov.com *.salesforce.com *.twimg.com *.my-salesforce.com slack-imgs-gov-dev.com *.slack-edge.com slack-imgs.mil *.cloudinary.com data:; media-src 'self' *.salesforce.com; frame-src *.force.com *.quip.com *.arkoselabs.com 'self' *.youtube-nocookie.com *.youtube.co.uk *.cybersource.com *.youtube.com.br *.youtube.es *.salesforce-experience.com *.salesforceliveagent.com *.adis.ws *.sfdcfc.net *.youtube.ca *.youtube.ie *.cloudinary.com *.vidyard.com *.vimeo.com *.youtube.jp bcove.video *.youtube.fr *.forceusercontent.com *.youtube.com *.brightcove.net *.wistia.net *.salesforce.com *.youtube.nl *.youtube.pl; font-src *.force.com 'self' *.salesforce.com blob: data:; connect-src 'self' *.amazonaws.com *.salesforce.com api.salesforce.com *.api.salesforce.com wss://*.slack.com; report-to sfdc-csp-ep; report-uri https://csp-report.force.com/_/ContentDomainCSPNoAuth?type=login
Content-Type
text/html; charset=UTF-8
Date
Fri, 25 Jul 2025 11:34:55 GMT
Expires
Thu, 01 Jan 1970 00:00:00 GMT
Origin-Trial
AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Referrer-Policy
origin-when-cross-origin
Server-Timing
cfReqDur;dur=782.243
Set-Cookie
CookieConsentPolicy=0:0; path=/; expires=Sat, 25-Jul-2026 11:34:55 GMT; Max-Age=31536000; secure
LSKey-c$CookieConsentPolicy=0:0; path=/; expires=Sat, 25-Jul-2026 11:34:55 GMT; Max-Age=31536000; secure
BrowserId=YvNwXmlLEfChFYff4Ees1g; domain=.salesforce.com; path=/; expires=Sat, 25-Jul-2026 11:34:55 GMT; Max-Age=31536000; secure; SameSite=None
Strict-Transport-Security
max-age=63072000; includeSubDomains
Transfer-Encoding
chunked
Vary
Accept-Encoding
X-Content-Type-Options
nosniff
X-FRAME-OPTIONS
DENY
33 headers detected
Technology Stack Analysis
HSTS
Security
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
Website Cookies 4
session
login.salesforce.com
Secure None
Value
[session redacted]
Expires:Session
BrowserId
.salesforce.com
Secure None
Value
YvNwXmlLEfChFYff4Ees1g
Expires:7/25/2026
LSKey-c$CookieConsentPolicy
login.salesforce.com
Secure
Value
0:0
Expires:7/25/2026
CookieConsentPolicy
login.salesforce.com
Secure
Value
0:0
Expires:7/25/2026
External Links 3
Log In with Email
welcome.salesforce.com
Target URL
https://welcome.salesforce.com?ref=lsc
Try for Free
www.salesforce.com
Target URL
https://www.salesforce.com/form/trial/freetrial.jsp?d=70130000000Enus
Privacy
www.salesforce.com
Target URL
https://www.salesforce.com/us/company/privacy
Requested Domains 2
c.salesforce.com
Unknown Type
No category information available
login.salesforce.com
Subdomain
No category information available