ScanMalware.com

Security Scan Report: readinggovuk-my.sharepoint.com

Redirected to:
https://login.microsoftonline.com/7b6a45a6-474e-42c0-9bcf-f2585d9f1b30...
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/27f094a4-7367-4603-81bd-de34f05238eaDomain and IP registration (RDAP)/api/v1/rdap/27f094a4-7367-4603-81bd-de34f05238eaHow often this domain was scanned/api/v1/domain/stats/readinggovuk-my.sharepoint.comScan history for this domain/api/v1/domain/history/readinggovuk-my.sharepoint.com?limit=15
This website contacted 13 IPs in 4 countries across 8 domains to perform 24 HTTP transactions. The main domain is sharepoint.com and was registered 28 years ago.

Submitted URL: https://readinggovuk-my.sharepoint.com

Effective URL:
https://login.microsoftonline.com/7b6a45a6-474e-42c0-9bcf-f2585d9f1b30...
Redirected

The Cisco Umbrella rank of the primary domain is #66 of the top 1 million websitesTop 100 Site

AI Security Verdict

Low Risk

Confidence: 55%

2
Risk Score

Genuine Microsoft sign-in page branded for Reading Borough Council, reached via a sharepoint.com tenant subdomain. No malware, phishing kit or Indicators of Compromise, but the council-branded credential prompt on a non-council host cannot be verified; confirm the link with the council directly.

Risk Factors (3)
Microsoft-branded credential prompt for a UK council (reading.gov.uk addresses) reached from a sharepoint.com tenant subdomain whose name imitates the council's gov.uk domain rather than from a reading.gov.uk host.
Three cross-domain redirects before the login form is presented, obscuring the true origin of the sign-in link.
Tenant-branded Microsoft login pages can be stood up on attacker-controlled tenants, so entering credentials for an organisation here cannot be independently verified as going to that organisation.
Safety Factors (5)
The sign-in page itself is served from genuine Microsoft domains (login.microsoftonline.com, aadcdn.msauth.net, autologon.microsoftazuread-sso.com) with Microsoft's standard SharePoint OAuth client id and redirect_uri.
No credential exfiltration detected; the form posts to Microsoft's own endpoint, not to a third-party collector.
No Indicators of Compromise, no Safe Browsing, YARA, kit-roster or IDS/surveillance alerts of phishing or malware.
OCR/HTML content is consistent with a normal Office 365 tenant sign-in for a public-sector organisation.
Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 4 to 2
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Domain Name Analysis

Domain 'readinggovuk-my.sharepoint.com' uses the commercial generic top-level domain (.com) and includes subdomain 'readinggovuk-my'. The registrable portion 'sharepoint' spans 10 characters containing four vowels alongside 6 consonants. Word splitting yields two words: share, point. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://readinggovuk-my.sharepoint.com

Page Load Overview

1.52s
Total Load Time
521 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:113 chars
Detector Agreement:67%

Website Classification

Primary Category

government public service40% confidence
Type: webapp
Method: ml+structural

All Detected Categories

government public service
40%
finance banking
33%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1220.190.159.130Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
113.107.136.10Azure · CLOUDRedmond, Washington, United States
AS8075Microsoft Corporation
120.190.160.67Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
113.107.246.44Azure · CLOUDUnited States
AS8075Microsoft Corporation
123.207.210.132Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
120.190.159.131Office365 · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
120.50.201.201Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
120.190.159.23Office365 · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
120.190.159.64Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
120.190.159.2Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
2413--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18BA38DD57FA62C37828651B5F1B63D02AE3B6803898CDC64F59CC9882FFBA0D9127517

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:lxtIo8GLG28aTyRGjUFW0aTGaTb2EcaT1WqHTIZ9Tjuokmap5vPoMLufY0wl2iA+:rtB8/aT8W0aTGaTb2faT1lH2a/A1aTOC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:99800:IQ6hnBcAAAOICQh0o0IIwMPARYQWoq0BAVjERCUiAIAxNqcYaQKjHiIsAIkKUAAIciGNrFpOBUAUQBuvAIAEESMQqGcFAICH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:9c9c6363cc9c99cc
Difference Hash:0420b23333b20c20
Wavelet Hash:c0c0181818180001
Color Hash:#2dd298

Other Hashes

Crop Resistant:eae0b8b2c38caaf0,0420b23333b20c20

Scan History

Scan history not available

Unable to load historical scan data