Security Scan Report: rfc-uat.gw.dfnld.nl

Redirected to:
https://login.microsoftonline.com/14ddeb6c-2acb-4357-8a39-be0995309642...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 14 IPs in 5 countries across 8 domains to perform 21 HTTP transactions. The main domain is dfnld.nl and was registered 7 years ago.

Submitted URL: https://rfc-uat.gw.dfnld.nl

Effective URL:
https://login.microsoftonline.com/14ddeb6c-2acb-4357-8a39-be0995309642...
Redirected

AI Security Verdict

Safe Website

Confidence: 88%

0
Risk Score

A legitimate Microsoft Entra ID sign-in page with DELTA Fiber tenant branding, reached via a normal redirect from rfc-uat.gw.dfnld.nl. No phishing, malware or threat-intel evidence.

Safety Factors (5)
Final URL is Microsoft's official sign-in domain (login.microsoftonline.com)
OAuth2 redirect_uri matches the originating site (rfc-uat.gw.dfnld.nl)
Legitimate SSO flow detected; no credential exfiltration
No Indicators of Compromise, YARA, IDS or Safe Browsing hits
Only a single, ordinary cross-domain redirect for authentication
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Domain Name Analysis

The domain 'rfc-uat.gw.dfnld.nl' uses the Dutch country-code top-level domain (.nl) with subdomain 'rfc-uat.gw'. Its registrable label 'dfnld' stretches across 5 characters containing zero vowels alongside 5 consonants. Splitting it apart reveals two words: df, nld. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rfc-uat.gw.dfnld.nl

Page Load Overview

1.07s
Total Load Time
542 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:218 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
820.190.160.22Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
198.67.183.229Azure · CLOUDFrankfurt am Main, Hesse, Germany
AS8075Microsoft Corporation
120.190.159.68Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
123.207.210.132Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
113.107.246.60Azure · CLOUDUnited States
AS8075Microsoft Corporation
1104.26.3.125Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
140.79.150.124Azure · CLOUDParis, Île-de-France, France
AS8075Microsoft Corporation
140.126.32.133Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
12.21.239.158Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
12.21.239.135Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2114--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T144836CEABEB71D3B864A45B5B0BA3E029A375907880C9D60F18CCD942FFB64D4137617

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:jFC8GLG2IOqlh5PmSSYeALQWn6TIZ9Tjuokmap5vPoMLuBY0xP8snisC:Y85OqZ9SYeALQU62a/AVN3C

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:87987:sbEWiQCLRKAWkGiQFAV4VIIVEAkUohWAjCiYojVNDBqewBABIIkJAESAYINh0AgAi6BiVCKAU2NrJRaBEgFEJSixMCgJ8KgM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:dc896276cc749999
Difference Hash:0f33323232323c3c
Wavelet Hash:c3dbda9a9e9e040c
Color Hash:#78773a

Scan History

Scan history not available

Unable to load historical scan data