ScanMalware.com

Security Scan Report: afdcanary.officeapps.live.com.mcas.ms

Redirected to: https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&McasCSRF=aadcab54c104b2bd1907bf474fc1988513e9a7da49c0ce0bec67a44b45693b21&originalUrl=https%3A%2F%2Fafdcanary.officeapps.live.com%2F

Site favicon
Submitted: Mar 4, 2026, 3:28:03 PMCompleted: Mar 4, 2026, 3:29:20 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 2 countries across 4 domains to perform 1 HTTP transaction. The main domain is mcas-proxyweb.mcas.ms and was registered NaN years ago.

Submitted URL: https://afdcanary.officeapps.live.com.mcas.ms

Effective URL: https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&McasCSRF=aadcab54c104b2bd1907bf474fc1988513e9a7da49c0ce0bec67a44b45693b21&originalUrl=https%3A%2F%2Fafdcanary.officeapps.live.com%2FRedirected

The Cisco Umbrella rank of the primary domain is #7,107 of the top 1 million websitesTop 10K Site

AI Security Verdict

Safe Website

Confidence: 96%

0
Risk Score

Legitimate Microsoft redirect page with no malicious activity.

Safety Factors
Well‑established domain (over 6 years old)
High Cisco Umbrella ranking (top 10k)
No malicious Indicators of Compromise
No JavaScript malware patterns detected
No network IDS alerts
No credential‑exfiltration behavior
Domain age information unavailable

Details

Page Title

Redirect Notice

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(27%)

Domain Information

The domain 'afdcanary.officeapps.live.com.mcas.ms' uses the .ms country-code top-level domain and includes subdomain 'afdcanary.officeapps.live.com'. Its registrable label 'mcas' stretches across 4 characters containing 1 vowel alongside 3 consonants. It segments into 2 words: mc, as. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://afdcanary.officeapps.live.com.mcas.ms

Page Load Overview

1.47s
Total Load Time
16
HTTP Requests
4
Domains
58 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:276 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software27% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
620.90.50.115Cardiff, Wales, United Kingdom
AS8075Microsoft Corporation
523.52.181.212Germany
AS8075
513.107.213.44United KingdomUnknown
163--

Detected Technologies2

HSTS
40%
Lodash
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15EF1955FCCD38C2587A1828D90FD77CCA93DA74B9885C858F99C47848FC6AE995D21C8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:+d1aH1ab1as1ah1aoj4t9R1a5WxzFIfzYGxzYhn9qlNzU4xDwzOSyrgpo1ajcB92:+HagDOj8t9T3xpIf7xO8lNAXz8RHDmxN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7771:IhZxUQRhCOKAoQAAFIAQgYAgARzOVaoMXqBYIw/IggQSewYYqFFoEiKIwsAClQEg0CwgKRytiEQo46pK4wDUgNMFACgIISAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7c3e7ffffff01
Perceptual Hash:a7728dd889f02772
Difference Hash:000c0c08000000c1
Wavelet Hash:ffe7c3e70000ff00
Color Hash:#2d6d86

Other Hashes

Crop Resistant:000c0c08000000c1

Scan History

Scan history not available

Unable to load historical scan data