Security Scan: Trail

Summary

This website contacted 7 IPs in 3 countries across 4 domains to perform 15 HTTP transactions. The main domain is bfui2bp0kz.credibledomain.de.

Submitted URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?scope=openid&prompt=none&client_id=8d216f7e-d484-46a2-b5b0-07b7d1b3d10d&state=ZW1haWxAbWFpbC5jb20=

Effective URL: https://bfui2bp0kz.credibledomain.de/l/JeRLk2aiKXQ?error=login_required&error_description=AADSTS50058%3a+A+silent+sign-in+request+was+sent+but+no+user+is+signed+in.+The+cookies+used+to+represent+the+user%27s+session+were+not+sent+in+the+request+to+Azure+AD.+This+can+happen+if+the+user+is+using+Internet+Explorer+or+Edge%2c+and+the+web+app+sending+the+silent+sign-in+request+is+in+different+IE+security+zone+than+the+Azure+AD+endpoint+(login.microsoftonline.com).+Trace+ID%3a+5d5a9f14-67e6-47ac-8189-861a614c6d00+Correlation+ID%3a+4f4d8bde-f582-4196-80f5-a152ae64e8b0+Timestamp%3a+2026-04-22+21%3a05%3a54Z&error_uri=https%3a%2f%2flogin.microsoftonline.com%2ferror%3fcode%3d50058&state=ZW1haWxAbWFpbC5jb20%3d#Redirected

The Cisco Umbrella rank of the primary domain is #8 of the top 1 million websitesTop 100 Site

AI Security Verdict

Moderate Risk

Confidence: 92%

Risk Score

The page redirects from Microsoft’s login to an unknown domain, contains a base64‑encoded email token and brand impersonation – high‑risk credential phishing. Report as scam.

Risk Factors

Base64 email token tracking

Domain mismatch between brand (Microsoft) and hosting domain

Redirect to unknown, potentially newly‑registered domain

Brand impersonation without disclosure

Absence of legitimate forms despite phishing indicators

Safety Factors

Original domain (login.microsoftonline.com) is well‑established and highly ranked

No Indicators of Compromise matched in threat intel databases

No JavaScript malware YARA matches

No network IDS alerts detected

No credential exfiltration or malicious JavaScript behavior observed

Established domain (8688 days old) with no strong malicious indicators — risk clamped from 8 to 5

Domain age information unavailable

Details

Page Title

Trail

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Screenshot

Page Load Overview

1.02s

Total Load Time

HTTP Requests

Domains

59 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:en

Text Length:37 chars

Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	23.53.42.114	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	20.190.160.2	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
2	20.190.160.14	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
2	104.18.95.41	United States	AS13335Cloudflare, Inc.
2	104.18.94.41	United States	AS13335Cloudflare, Inc.
2	40.126.32.134	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
2	172.67.144.224	United States	AS13335Cloudflare, Inc.
15	7	-	-