Security Scan: Sign in to your account

Summary

This website contacted 7 IPs in 4 countries across 7 domains to perform 33 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://tquals-d2.apsc.com

Effective URL: https://login.microsoftonline.com/842bd572-4cb5-46e6-bb61-467a52c991c5/oauth2/authorize?response_type=code&client_id=d0d72565-4fe0-47a2-a4db-710dd4f5810a&scope=openid&nonce=7398d1a8-949a-4191-9f0b-41338cff91b1&redirect_uri=https%3a%2f%2ftquals-d2.apsc.com%2f&state=AppProxyState%3a%7b%22InvalidTokenRetry%22%3anull%2c%22IsMsofba%22%3afalse%2c%22OriginalRawUrl%22%3a%22https%3a%5c%2f%5c%2ftquals-d2.apsc.com%5c%2f%22%2c%22RequestProfileId%22%3anull%2c%22SessionId%22%3a%220273095b-a485-41c4-ad97-0ccf12d6abf2%22%7d%23EndOfStateParam%23&client-request-id=0273095b-a485-41c4-ad97-0ccf12d6abf2&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&sso_reload=trueRedirected

AI Security Verdict

Low Risk

Confidence: 92%

Risk Score

The page collects credentials via a login form that posts to Microsoft, flagged by critical IDS alerts and heavy JS obfuscation, indicating a confirmed phishing scam.

Risk Factors

Cross‑origin credential form submission

Critical network IDS alert indicating possible data exfiltration

Heavy JavaScript obfuscation (base64, charcode manipulation, function() constructors)

Unranked domain lacking reputation

Presence of hidden fields typical of SSO but could be used for token harvesting

Safety Factors

Domain age >30 years (well‑established)

No Indicators of Compromise matches

No YARA malware patterns detected

No credential exfiltration observed in JavaScript behavior

Form posts to legitimate Microsoft login endpoint

Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 9 to 2

Domain age information unavailable

Details

Page Title

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Screenshot

Page Load Overview

1.65s

Total Load Time

HTTP Requests

Domains

470 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:en

Text Length:302 chars

Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence

Type: webapp

Method: structural

All Detected Categories

No categories detected

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	13.107.213.44	United States	AS8075Microsoft Corporation
2	23.53.42.114	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	52.168.112.66	Washington, Virginia, United States	AS8075Microsoft Corporation
2	20.190.160.131	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
2	13.107.246.44	United States	AS8075Microsoft Corporation
2	172.172.255.229	Washington, Virginia, United States	AS8075Microsoft Corporation
2	20.190.159.64	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
17	7	-	-