Security Scan Report: stevemadden.jamfcloud.com

Redirected to:
https://login.microsoftonline.com/8a430b7b-702a-46a6-ade9-9e14bf685546...
Site favicon
Submitted: Aug 29, 2026, 10:46:02 PMCompleted: Aug 29, 2026, 10:47:11 PMpubliccompleted

Summary

This website contacted 11 IPs in 4 countries across 6 domains to perform 2 HTTP transactions. The main domain is login.microsoftonline.com and was registered 31 years ago.

Submitted URL: https://stevemadden.jamfcloud.com

Effective URL: https://login.microsoftonline.com/8a430b7b-702a-46a6-ade9-9e14bf685546/saml2?SAMLRequest=jZJPT%2BMwEMW%2FSuS7k9R188dqigoILRIrShM4cJskEzBK7K7HqfbjbzZttewFcbT83rzx%2B3l99XvogyM60tYUbBHGLEDT2Fabt4I9V3c8Y1ebNcHQi4Pajv7d7PHXiOSDyWhInW4KNjqjLJAmZWBAUr5R5fbngxJhrA7OetvYngVbInR%2BirqxhsYBXYnuqBt83j8U7N37A6koIo9HHKBt0YQfMHRNb8c2bOwQ%2FQ2LyvKRBbfTBtqAn7e%2BGHv7pk046MZZsp23ptcGZ2MGchnXac3TWACXCSQcWsx5jgtZd0m2Wslkni5YcGddg%2FNLC9ZBT8iC%2B9uCbfdPmC7bdJnzNEsyLqGpeb6Ajmcr6GRbL9O4yyct7YBIH%2FGfm2jEe0MejC%2BYiEXC44yLvBJCyUTFq1DK7JUFu3NN19qc6v%2Bq0%2FokIvWjqnZ891hWLHi5YJwE7AxNzenuM62vB8MFEdt8E8iAHlrwsI4%2BJ27Ox%2F9%2FzeYP&RelayState=%2F&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #1,654 of the top 1 million websitesTop 10K Site

AI Security Verdict

Low Risk

Confidence: 92%

2
Risk Score

The page impersonates Steve Madden and harvests credentials via a login form that posts to Microsoft, indicating a phishing attempt.

Risk Factors
Brand impersonation of a well‑known retailer
Credential collection on a mismatched domain
Cross‑origin form submission to Microsoft login endpoint
Safety Factors
Uses legitimate Microsoft authentication endpoint for SSO
Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 8 to 2
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

social media network

(35%)

Domain Information

The domain name 'stevemadden.jamfcloud.com' uses the commercial generic top-level domain (.com) with subdomain 'stevemadden'. The second-level label 'jamfcloud' is 9 characters long with 3 vowels and 6 consonants. Word splitting yields 3 words: jam, f, cloud. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://stevemadden.jamfcloud.com

Page Load Overview

1.47s
Total Load Time
20
HTTP Requests
6
Domains
464 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:137 chars
Detector Agreement:67%

Website Classification

Primary Category

social media network35% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
35%
news media journalism
25%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
103.134.164.125Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
140.126.31.73Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
113.107.246.44Azure · CLOUDUnited States
AS8075Microsoft Corporation
120.190.160.64Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
13.133.38.31Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
140.126.31.0Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
120.190.160.132Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
123.1.96.191London, England, United Kingdom
AS20940Akamai International B.V.
120.190.159.64Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
120.190.160.20Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
2011--

Page Statistics

20
Requests
6
Unique Domains
483.2 KB
Total Size

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T102135CDA7B84342BCB9215F1C4AF7B0BD63E15678888CCD8F04DC9485EBABAB4567503

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:l28J7QLG2RCjiuC8vO3OjlP2crNSa+X+FV2Tj8Z9TjuvhCknmaprVvPoMLaZczC2:l28GLG2wju8vO3OJPBG82TIZ9Tjuokmc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:43561:xIQAAhiASbQkAmMIAwwBJAiA4IQc5PWhKBwyIxYAhACggxCAMIiBiKQ7RsklcKwEQhpoGDCBEaEFAwQygBNFGQTKEA5MIhyx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:99993366cc1b9999
Difference Hash:082032b2b2320c01
Wavelet Hash:f0f0f8f8d8d8c0c1
Color Hash:#783a58

Other Hashes

Crop Resistant:082032b2b2320c01

Scan History

Scan history not available

Unable to load historical scan data