corporate

English

ai_session

ai_user

exp-session-id

The domain 'get.microsoft.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'get'. Count 9 characters in 'microsoft' with 3 vowels and 6 consonants. Splitting it apart reveals 1 word: microsoft. No strong language cues emerged from the frequency lists.

default-src 'self' data:;script-src 'self' https://*.clarity.ms https://c.bing.com wcpstatic.microsoft.com js.monitor.azure.com www.microsoft.com get.microsoft.com xvsec.video.microsoft.com bat.bing.com 'unsafe-inline';style-src * 'unsafe-inline';connect-src * data: ms-windows-store:;font-src *;img-src * data: blob:;media-src 'self' blob: https://sfds-production.azurefd.net https://canvasstorageprodtorus.blob.core.windows.net https://cdn-dynmedia-1.microsoft.com https://malibussl-s.akamaihd.net;frame-src * ms-windows-store:;report-uri https://csp.microsoft.com/report/app-store-web-prod

appId=cid-v1:04e455f9-321c-49bf-8d2c-d79fbf5e8cde

appId=cid-v1:24dd0b7c-7995-45d6-b3b6-925639dc2d30

object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-D3JcucgvYzdaCkXY4mFfcA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All

appId=cid-v1:7d42d046-dcef-4ece-9958-25d0ee39f9a0

Explore the Microsoft Store for apps and games on Windows. Enjoy exclusive deals, new releases, and your favorite content all in one place.

description

Microsoft Store - Download apps, games & more for your Windows PC

https://apps.microsoft.com/assets/icons/logo-plated-256x256.png

twitter:card

twitter:site

twitter:title

twitter:description

twitter:image

viewport-fit=cover, width=device-width, initial-scale=1.0

viewport

msvalidate.01

t1VwBk_bYG_uw8KqYaF_sbdcPsheMNxFQt1UKoFxM78

google-site-verification

64T9nhDH4yUBpQhififtc0GP65kxKnncJSyqCBHANrc

theme-color

mobile-web-app-capable

apple-mobile-web-app-title

apple-mobile-web-app-status-bar-style

360-site-verification

baidu-site-verification

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

(function redirectOnUnsupportedBrowser(){var checks={fetch:supportsFetch,promises:supportsPromises,modules:supportsModules,webcomponents:supportsWebComponents};for(var checkName in checks){var check=checks[checkName];if(!check()){window.location.href="/unsupported-browser?feature="+checkName.toString();break}}function supportsWebComponents(){return"customElements"in window&&"attachShadow"in Element.prototype}function supportsPromises(){return"Promise"in window}function supportsFetch(){return"fetch"in window}function supportsModules(){return"noModule"in HTMLScriptElement.prototype}})();

class EarlyLoad{constructor(){this.locale=window.pageLocalizer.hl,this.market=window.pageLocalizer.gl,this.uiLocale=window.pageLocalizer.uiLocale,this.flagsFetch=this.loadFlags(),this.flagsHashFetch=this.flagsFetch.then((t=>EarlyLoad.hashFlags(t))).catch((()=>0)),this.chromeFetch=this.flagsHashFetch.then((t=>this.loadChrome(t))),this.spotlightFetch=null,window.pageMetadata&&window.pageMetadata.spotlightInfo&&(this.spotlightFetch=this.flagsHashFetch.then((t=>this.loadSpotlight(t,window.pageMetadata.spotlightInfo))))}loadFlags(){const t=sessionStorage.getItem(`exp-session-flags-${this.locale}-${this.market}`);if(t)try{const e=JSON.parse(t);return Promise.resolve(e)}catch(t){console.warn("Unable to parse exp session flags",t)}const e={hl:this.locale,gl:this.market};return EarlyLoad.jsonFetch("/api/settings/flags",e).catch((t=>(console.warn("Unable to fetch flags. Proceeding with empty flags",t),{})))}loadChrome(t){const e={hl:this.locale,gl:this.market,exp:t};return EarlyLoad.jsonFetch("/api/pages/chrome",e)}loadSpotlight(t,e){const a={collectionName:e.collectionName,site:e.site,hl:this.locale,gl:this.market,exp:t};return EarlyLoad.jsonFetch("/api/reco/getPromotionProducts",a)}overrideExpFlags(t){this.flagsHashFetch=Promise.resolve(EarlyLoad.hashFlags(t))}}EarlyLoad.hashFlags=function(t){if(!t||!t.values||0===Object.keys(t.values).length)return 0;const e=structuredClone(t.values);for(const t in e)delete e[t].variant;return EarlyLoad.createHash(e)},EarlyLoad.createHash=function(t){if(!t)return 0;const e=JSON.stringify(t);let a=0;for(let t=0;t<e.length;t++){a=(a<<5)-a+e.charCodeAt(t),a|=0}return a},EarlyLoad.jsonFetch=function(t,e){let a=t;if(e){const t=new URLSearchParams;Object.entries(e).filter((t=>void 0!==t[1]&&null!==t[1])).forEach((e=>t.append(e[0],null===e[1]?"":e[1]))),a+="?"+t.toString()}return EarlyLoad.generateHoneypotToken(a).then((t=>fetch(a,{headers:{"X-API-Ref":t}}))).then((t=>{if(!t.ok){if(404===t.status||410===t.status)throw new Error("HTTP GET resulted in 404",t.status);throw new Error(`HTTP GET to ${a} resulted in non-successful status code ${t.status}`,t.status)}return t})).then((t=>t.json()))},EarlyLoad.generateHoneypotToken=function(t){const e=t.startsWith("/")?location.origin+t:t,a=(new TextEncoder).encode(e);return crypto.subtle.digest("SHA-256",a).then((t=>Array.from(new Uint8Array(t)).map((t=>t.toString(16).padStart(2,"0"))).join("")))},window.pageEarlyLoad=new EarlyLoad;


        const darkModeMatch = window.matchMedia('(prefers-color-scheme: dark)');
        if (darkModeMatch.matches) {
            document.documentElement.classList.add("sl-theme-dark");
        }
        darkModeMatch.addEventListener("change", e => document.documentElement.classList.toggle("sl-theme-dark"));
    


            if ('serviceWorker' in navigator) {
                window.addEventListener("load", () => navigator.serviceWorker.register("/service-worker.js", {
                    scope: "/"
                }).catch(swRegError => console.warn("Unable to register service worker due to error.", swRegError)));
            }
        

Build your app badge - Microsoft Apps

fallback

✅ Low Risk - https://get.microsoft.com/

Requests	IP Address	Location	AS Autonomous System
67	13.107.213.44	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
4	23.32.238.49	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
4	40.79.167.8	Sydney, New South Wales, Australia	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
4	52.242.103.142	Boydton, Virginia, United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
3	13.107.246.44	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
2	20.190.160.3	Amsterdam, North Holland, Netherlands	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
2	23.32.238.57	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	20.190.159.130	Dublin, Leinster, Ireland	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
2	2603:1027:1:158::8	Amsterdam, North Holland, Netherlands	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
2	2603:1030:608:8::c2	Chicago, Illinois, United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
87	38	-	-

Security Scan Report: get.microsoft.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Scan History