Security Scan Report: login.microsoftonline.com

Redirected to:
https://winter-static-signals-floating-past-darkened-engine-rooms.adso...
Submitted: Jun 2, 2026, 10:19:52 AMCompleted: Jun 2, 2026, 10:21:07 AMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 2 countries across 2 domains to perform 2 HTTP transactions. The main domain is winter-static-signals-floating-past-darkened-engine-rooms.adso-uae.co and was registered NaN years ago.

Submitted URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?state=de6978f1-467a-43e0-8cfb-3bb9f6fd83b5&scope=openid&prompt=none&client_id=827b7127-8bb1-4143-ac76-8caa4fa67c21

Effective URL: https://winter-static-signals-floating-past-darkened-engine-rooms.adso-uae.co/routingmatrix-securityprocessing-authmodule-layerframework-sessionvalidation-nodegateway-dutycalibration-informationinsufficient-requiredinteraction-single-sign-on-authoritytimeout-reviewengineRedirected

The Cisco Umbrella rank of the primary domain is #8 of the top 1 million websitesTop 100 Site

AI Security Verdict

Safe Website

Confidence: 78%

2
Risk Score

The site shows SharePoint branding but lacks any credential collection; with no malicious indicators and a well‑established domain, it is deemed legitimate, though users should verify the source before interacting.

Risk Factors
Brand impersonation (SharePoint) on a non‑Microsoft domain
Redirect from a legitimate Microsoft login endpoint to an unrelated domain
Safety Factors
Domain age > 20 years
Cisco Umbrella ranking within top 10
No malicious JavaScript or network alerts
Absence of credential or payment collection forms
Domain age information unavailable

Details

Page Title

SharePoint - Document Shared

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

documentation technical

(98%)

Domain Information

The domain name 'login.microsoftonline.com' uses the commercial generic top-level domain (.com) and includes subdomain 'login'. Count 15 characters in 'microsoftonline' holding 6 vowels versus 9 consonants. Word splitting yields two words: microsoft, online. Median word length comes out to 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://login.microsoftonline.com/common/oauth2/v2.0/authorize?state=de6978f1-467a-43e0-8cfb-3bb9f6fd83b5&scope=openid&prompt=none&client_id=827b7127-8bb1-4143-ac76-8caa4fa67c21

Page Load Overview

5.83s
Total Load Time
21
HTTP Requests
8
Domains
125 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:414 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical98% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
98%
technology software
91%
download file sharing
54%
government public service
37%
adult content
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1120.190.160.66Amsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
1023.207.210.132Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
212--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A152E92276F11111645AA550BB33DF473F209213A7068A283B6C96B6DF4DFA28CB77DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:WZ51qMo/7L2JCoGsJAw0nbWZPdbww/99uhQRlTbFSi9Ye+2vkJuwCZHpknx/3:rMPdbwwbiykAn+nx/3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14028:hJhKMGMQxADIAPHmw9EUMFBVRYwoHQEIuAIPBCm8nJiESpPGgsAQCzgRoQAEEmGwRZlgADQIQ0iglWAGIAoRhABizIQDDKnw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c2c2c3c3c180000
Perceptual Hash:9b9321ccce6c9999
Difference Hash:2a282a282a300800
Wavelet Hash:3c3c3c3c3f3f0303
Color Hash:#5aac53

Other Hashes

Crop Resistant:2a282a282a300800

Scan History

Scan history not available

Unable to load historical scan data