Security Scan: Sign in to Microsoft Azure

Summary

This website contacted 10 IPs in 4 countries across 8 domains to perform 25 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://enterpriseenrollment.toniwise.fi

Effective URL: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=c44b4083-3bb0-49c1-b47d-974e53cbdf3c&scope=https%3A%2F%2Fmanagement.core.windows.net%2F%2F.default%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fintune.microsoft.com%2Fauth%2Flogin%2F&client-request-id=019f48e6-024d-71ec-908a-8cd7871fd76c&response_mode=fragment&client_info=1&clidata=1&nonce=019f48e6-024e-7027-86b7-c1ecdb96a54d&state=eyJpZCI6IjAxOWY0OGU2LTAyNGUtNzM2Ni04OTQ5LTMyMGVlOWQ5YmQwNSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&x-client-SKU=msal.js.browser&x-client-VER=5.13.0&response_type=code&code_challenge=YIcBsegE-pUAcqUZ0aHMhGor8K41O7xRGwLKfMxMedA&code_challenge_method=S256&site_id=501430&instance_aware=true&sso_reload=trueRedirected

AI Security Verdict

Low Risk

Confidence: 78%

Risk Score

The site mimics Microsoft Azure login on an unrelated, unranked domain and collects credentials, indicating a high‑risk brand‑impersonation phishing page.

Risk Factors

Brand impersonation of Microsoft Azure

Credential collection form on unrelated domain

Unranked / low‑reputation domain

Highly obfuscated JavaScript

Safety Factors

Form posts to legitimate Microsoft login endpoint

No credential exfiltration detected

No malicious IoC or YARA matches

Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 7 to 2

Domain age information unavailable

Details

Page Title

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Screenshot

Page Load Overview

17.53s

Total Load Time

HTTP Requests

Domains

571 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:en

Text Length:187 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

77%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	13.107.246.44Azure · CLOUD	United States	AS8075Microsoft Corporation
2	20.184.175.12Azure · CLOUD	San Jose, California, United States	AS8075Microsoft Corporation
2	52.236.189.96Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
2	40.126.31.71Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
2	150.171.84.24Azure · CLOUD	United States	AS8075Microsoft Corporation
2	23.53.42.115	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	20.190.159.23Office365 · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
2	20.190.159.0Office365 · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
2	23.53.42.120	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	40.126.31.69Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
25	10	-	-