Security Scan Report: enterpriseenrollment.lifecare.com

Redirected to:
https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?...
Site favicon
Submitted: Jul 2, 2026, 9:48:51 PMCompleted: Jul 2, 2026, 9:50:02 PMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 2 countries across 2 domains to perform 2 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://enterpriseenrollment.lifecare.com

Effective URL: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=c44b4083-3bb0-49c1-b47d-974e53cbdf3c&scope=https%3A%2F%2Fmanagement.core.windows.net%2F%2F.default%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fintune.microsoft.com%2Fauth%2Flogin%2F&client-request-id=019f24ce-63e7-734b-9675-6e0c0aec0141&response_mode=fragment&client_info=1&clidata=1&nonce=019f24ce-63e7-7527-8e64-269c2d9d54d4&state=eyJpZCI6IjAxOWYyNGNlLTYzZTctN2ExNC04NmQxLTRhNjg1YmJmM2Y2ZiIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&x-client-SKU=msal.js.browser&x-client-VER=5.13.0&response_type=code&code_challenge=1sB60yIrgOmz--9f4P6m_yp2dU-K1EjIVFE-CZ-RKiM&code_challenge_method=S256&site_id=501430&instance_aware=true&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #139,329 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 75%

2
Risk Score

The page hosts a Microsoft‑style login form on an unrelated, low‑rank domain; likely a phishing attempt.

Risk Factors
Low domain ranking for a site presenting a well‑known brand
Credential collection form on unrelated domain
High JavaScript obfuscation score
Safety Factors
Domain age >30 years (well‑established)
No malicious IoC or YARA detections
No network IDS alerts
Cross‑origin form appears to be a legitimate SSO redirect
Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 6 to 2
Domain age information unavailable

Details

Page Title

Microsoft Intune admin center

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(77%)

Domain Information

You're looking at domain 'enterpriseenrollment.lifecare.com' on the commercial generic top-level domain (.com) and includes subdomain 'enterpriseenrollment'. Count 8 characters in 'lifecare' split between 4 vowels and 4 consonants. It segments into 2 words: life, care. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://enterpriseenrollment.lifecare.com

Page Load Overview

0.69s
Total Load Time
26
HTTP Requests
7
Domains
570 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:187 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
77%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1352.236.189.96Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
13150.171.84.49Azure · CLOUDUnited States
AS8075Microsoft Corporation
262--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T159631946F3C1F032E5292EE8D92614A17B7D169F612DCA04B1FC46842E53AD9CE77B0B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:OH3GRE8sh954sKij1/jNv/1yBLnc0cOiQ1OWirCx:i3eEP541iJjR9y20cOimOWimx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:72953:DEQRwQQMEIyGiSBGAFK8UApSBlpqA+xYpEAMqGBFtgHEwCCFgVhLETJDPIJAAoQAAAJjgcJiIRiIMoIJHGA4DVYFzIC0aIUk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003a3f3f373fff00
Perceptual Hash:85d970f626d919e4
Difference Hash:c8e2d2d2e4cae6e7
Wavelet Hash:003a3b3f373f7700
Color Hash:#1f9342

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data