Security Scan: Sign in to your account

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1512bdc0-47b2-42f4-a4aa-027e2feccc40 Domain and IP registration (RDAP)/api/v1/rdap/1512bdc0-47b2-42f4-a4aa-027e2feccc40 Certificate Transparency/api/v1/ct/login.microsoftonline.com How often this domain was scanned/api/v1/domain/stats/sso-c9bd3412.sso.duosecurity.com Scan history for this domain/api/v1/domain/history/sso-c9bd3412.sso.duosecurity.com?limit=15

This website contacted 15 IPs in 4 countries across 9 domains to perform 28 HTTP transactions. The main domain is login.microsoftonline.com and was registered 10 years ago.

Submitted URL: https://sso-c9bd3412.sso.duosecurity.com

Effective URL:

https://login.microsoftonline.com/85f78c4c-ad11-4735-9624-0b2c11611dff...

Redirected

The Cisco Umbrella rank of the primary domain is #1,195 of the top 1 million websitesTop 10K Site

AI Security Verdict

Safe Website

Confidence: 92%

Risk Score

Legitimate Duo SSO redirect to Microsoft's official sign-in (login.microsoftonline.com). Authentic Microsoft login markup, verified SSO flow, no IoC/YARA/IDS hits. Not phishing.

Safety Factors (5)

Destination domain login.microsoftonline.com is Microsoft's official authentication endpoint

Verified SSO redirect, not credential harvesting

No threat-intel, YARA, or IDS hits

SSO federation between Duo Security and Microsoft is a normal enterprise identity pattern

Numerous function() constructor calls are consistent with Microsoft's minified JS bundles, not obfuscated malware

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: -2057558656

MD5: 12e3dac858061d088023b2bd48e2fa96

Domain Name Analysis

The domain name 'sso-c9bd3412.sso.duosecurity.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'sso-c9bd3412.sso'. Its registrable label 'duosecurity' stretches across 11 characters containing 5 vowels alongside 6 consonants. Splitting it apart reveals two words: duo, security. Median word length comes out to 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.24s

Total Load Time

494 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:195 chars

Detector Agreement:67%

Website Classification

Primary Category

social media network40% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network

40%

technology software

28%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	3.33.200.169Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	20.190.160.20Office365 · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
1	13.107.246.44Azure · CLOUD	United States	AS8075Microsoft Corporation
1	20.190.160.66Office365 · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
1	2.21.239.158Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	20.190.159.71Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
1	13.89.179.15Azure · CLOUD	Des Moines, Iowa, United States	AS8075Microsoft Corporation
1	52.223.25.169Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	20.190.160.22Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
1	23.207.210.136Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
28	15	-	-