Skip to main content
Sandfish

Old Republic Surety - Agency Access Single Sign-On - Log in to Agency Access

https://agencyaccess.orsurety.com/Account/Login?ReturnU…

WACZ
Groupc336e2a9-902b-431c-856e-c287ebbdda9fsubmitted urlMember 1

Case summary

The target, observed result, and important findings.

Status
Current evaluation

Limited evidence: function fingerprint limit, interaction stalled

Findings
5Medium
Submitted URL
https://agentportal.orsurety.com/ Search for this value.
Effective URL
https://agencyaccess.orsurety.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3DPROD-AAR.Web.Portal%26redirect_uri%3Dhttps%253A%252F%252Fagentportal.orsurety.com%252Fsignin-oidc%26response_type%3Dcode%26scope%3Dopenid%2520profile%2520email%2520esurety7%2520esurety5%2520roles%26code_challenge%3DgnnJjKGwBzc7qSRH-v8om4iAbWxxYANiaCKt93AmHLs%26code_challenge_method%3DS256%26response_mode%3Dform_post%26nonce%3D639282105984415883.NDg1MTcwMzYtZmI2Yi00MmI1LTg5MzMtNTk0YWI1ZjFjNzYwZjI1MmIwYWMtZTI0Ny00NzM4LWE3NmUtMjk4MTc2NDUxMmE3%26state%3DCfDJ8OgMFqZBdUlOhaE88Ue7JTC9ge-XoF7jhZSZyRHTzI2lgWjSi6NRdjFD6EAPy47Oug6v3UZVosocaAUYAV7SOaIkfNytiBYFWV4AfaDvFEAYcxjR2hwZqJxK55gZES7af1vYMslGok6RKLNuUqUTXbxN18Ms0a_JraX1frLy5dCuMuKAfQS7P_rKWMNHPjYv4v1xNdRP5YBXIsUjR9mHD3w20jm2fWhQxoEWo6oFVuukbb_09AzZLyY4qKKEVhrzTacDV9Qo1jifQmNq4JXEIybsz2zlTlvaawUIC9_dx66JNu34R-mJdDyTDUfEOEM0TuBBUDEbjKu6WEEbsXRneF1xjRJfz5d525UYKvtJdD4_jq5S__NocRu0Fp_6MFzxvA%26x-client-SKU%3DID_NET6_0%26x-client-ver%3D6.35.0.0 Search for this value.0
Domain registration
orsurety.comMore than 90 days oldRegistered 1999-02-09 · Registrar GoDaddy.com, LLC
Language
Detecting...
Network
19 requests across 2 hosts
Cookies
6 observed
Favicon
3d4edf56…ec2fe8e4 Search for this value.
Infrastructure
Loading...
Behavior
0 recorded events
Interaction
4 actions · 1 submission · stopped: repeated state · download stage: repeated state
  1. 1. fillsucceededemail | Username | Email Address | Enter your email address
  2. 2. fillsucceededpassword | Password | Password | Enter your password
  3. 3. submitsucceededLOG IN
  4. 4. download control presssucceeded[email protected] [dispatched]

A successful press does not prove that a file arrived. Check the Payloads tab for recorded files.

Analysis metadata

How and when the analysis ran.

Input kind
url
Execution kind
capture
Duration
51.0s
Navigation
4 navigations
Engine version
0.4.0
Created
2026-10-21 20:16:31Z
Started
2026-10-21 20:16:33Z
Finished
2026-10-21 20:17:24Z
Archive
1.1 MB
Favicon source
html_link / favicon-v4
Analysis ID
309dcd99-91a9...

Signals by severity

Detected findings grouped by risk

Request activity

Network requests grouped by resource type

Behavior

Recorded actions grouped by type

Network contacts

Requests to the most active hosts

Request ownership

First-party and third-party requests

Response MIME types

Network responses grouped by MIME type