Security Scan: Sign in to your account

Summary

This website contacted 8 IPs in 4 countries across 5 domains to perform 18 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://helix.bastide-groupe.fr/simplesaml/www/index.php?auth=default&account=50004

Effective URL: https://login.microsoftonline.com/3252b6c3-2a82-474b-bcef-a6a72cfd74dc/saml2?SAMLRequest=fVLBjtowFPyVyHfHiRNIsACJLqqKtG3RQnvopXLsF7Dk2Kmfs%2Bz%2BfUMo6vbQPVkav5k3M3pLlJ3txWaIZ%2FcEvwbAmLx01qGYPlZkCE54iQaFkx2giEocNp8fBU8z0QcfvfKWvKG8z5CIEKLxjiS77Yr8VDyTtQTNm7qoiiZf8LwtdKn1vKyKWb1o8jJbQF1lkiTfIeDIXJFRaKQjDrBzGKWLI5TxOc1Kms%2BO2VzMasHLHyTZjmmMk3FinWPsUTBm%2Fcm4tDMqePRt9M4aB6nyHSv4jDdzVVAua07Lqmxoo6Clci4rrlpdlVqxa0ZOks09yIN3OHQQDhCejYJvT49%2FV53Bmpe0kaMLDfQU%2FNBD2gaGpustXJXY5XJhndeDhbQ%2F95M6w9vLqVQ4oRpaOdhIsSfJ%2Fk%2FnH4zTxp3er7u5DaH4dDzu6f7r4UjWy6u2mOoL67vTu8cOtFHSpiDx9dmM5U7FLNlbzvJ2Ml%2FGbbvt3lujXpOPPnQy%2Ft9MnuYTYjRtp1ExOOxBmdaAHtu01l8eAsgIKxLDAIStb0v%2FPc31bw%3D%3D&RelayState=https%3A%2F%2Fhelix.bastide-groupe.fr%2Fsimplesaml%2Fwww%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=qzKXvcmHjgIy8XDgRfIKyh%2FR%2F68qQ6GvgnDucRFjes8LXAhMqNz6BuCttKLv6WgLIlKNM3SB9W7De3Hrl9eH6rNA0spbJHsCYt3deHA1xoSh5WEdma%2Bin6706Y1Gv1kFErygINy1OH8Wbec2SkNmamu6KaYitd0XmL9r4O36%2FJUaJAXiTB%2Bc0%2FWrDqaO6VFKfcc6ggTI4MUHNyaN2G09bU%2F3nyKkImpcgIuMkEQMnXc6YhDAeagEDbudxyCc4OpX0JaLaoH9aJVI6rXDHH3YYA17j0Io3IGUflzR7XYs6lnUVsFA40Zjhrh0cTk14FpCMGyStyjbb%2FJ2XRMZ9IUmDw%3D%3D&sso_reload=trueRedirected

AI Security Verdict

Moderate Risk

Confidence: 82%

Risk Score

The site appears to impersonate Microsoft and collects credentials on an unranked domain, indicating a high‑risk phishing scenario despite its age and lack of malware signals.

Risk Factors

Unranked domain with major brand name

Credential collection on a domain that does not belong to the brand

Potential typosquatting / brand impersonation

Safety Factors

Domain age 8680 days (well established)

No malicious Indicators of Compromise detected

No JavaScript malware patterns or IDS alerts

Cross‑origin submission goes to legitimate Microsoft login endpoint

Established domain (8680 days old) with no strong malicious indicators — risk clamped from 8 to 5

Domain age information unavailable

Details

Page Title

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Screenshot

Page Load Overview

0.88s

Total Load Time

HTTP Requests

Domains

466 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:en

Text Length:109 chars

Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence

Type: webapp

Method: structural

All Detected Categories

No categories detected

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	40.126.31.0	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
2	40.126.31.130	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
2	23.207.210.132	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	40.126.31.129	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
2	20.190.159.129	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
2	23.207.210.137	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	13.38.237.202	Paris, Île-de-France, France	AS16509Amazon.com, Inc.
2	13.107.246.44	United States	AS8075Microsoft Corporation
18	8	-	-