Skip to main content
Sandfish

Northwestern Mutual | Authentication

https://login.northwesternmutual.com/auth/registration/…

Groupa02cc54b-7263-49f3-b861-ff78eef84c8bsubmitted urlMember 1

Case summary

The target, observed result, and important findings.

Status
Current evaluation

Score 3: risk 5 less 2 for assurance evidence.

Limited evidence: interaction stalled, unclassified response missing

Findings
6Medium
Kit source work

Loading related source work…

Discover or upload kit source
Domain registration
nm.comMore than 90 days oldRegistered 1996-07-09 · Registrar CSC Corporate Domains, Inc.
Language
Detecting...
Network
263 requests across 22 hosts
Infrastructure
Loading...
Behavior
0 recorded events
Interaction
9 actions · 3 submissions · stopped: repeated state · download stage: no payload control
  1. 1. clicksucceededClient Login [keyboard]
  2. 2. fillsucceededtext | | Username |
  3. 3. fillsucceededpassword | | Password |
  4. 4. submitsucceededLog In
  5. 5. submitsucceededRegister
  6. 6. clicksucceededGet Started [dispatched]
  7. 7. fillsucceededtext | | First Name | Enter your first name
  8. 8. fillsucceededtext | | Last Name | Enter your last name
  9. 9. submitsucceededNext [dispatched]

QR codes (1)

Decoded values, source frames, and destination analyses in this group.

Loading QR evidence.

    Analysis metadata

    How and when the analysis ran.

    Input kind
    url
    Execution kind
    capture
    Duration
    1.4m
    Navigation
    6 navigations
    Engine version
    0.4.2
    Created
    2026-11-14 19:59:26Z
    Started
    2026-11-14 19:59:26Z
    Finished
    2026-11-14 20:00:52Z
    Archive
    4.8 MB
    Favicon source
    html_link / favicon-v7
    Analysis ID
    ce719c71-d869...

    Document-source diagnostics

    These records identify rejected document reads. A current epoch does not prove that a replacement read succeeded. Later success does not erase an earlier evidence limit.

    No rejected document reads were recorded.

    Browser-observed navigation status

    The browser status can differ from the normalized origin response, including during a proxy failure. Inspect the recorded document request for origin response evidence.

    Signals by severity

    Detected findings grouped by risk

    Request activity

    Network requests grouped by resource type

    Behavior

    Recorded actions grouped by type

    Network contacts

    Requests to the most active hosts

    Request ownership

    First-party and third-party requests

    Response MIME types

    Network responses grouped by MIME type