Security Scan: Sign in to your account

Summary

This website contacted 9 IPs in 2 countries across 9 domains to perform 122 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://clientservices-ert.hrblock.com

Effective URL: https://login.microsoftonline.com/3ec4eda1-a5d1-433d-90da-8dc791283d95/oauth2/v2.0/authorize?client_id=c8e1eb7b-5ac5-47f9-8735-02f4b1311a02&scope=https%3A%2F%2Fwc-core.hrblock.com%2Fuser_impersonation%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fclientservices-ert.hrblock.com&client-request-id=019bea45-02c7-734c-995a-54b047d73fb0&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=3.28.1&client_info=1&code_challenge=KYcGiAOGFdGO2vdHyvOcap_sJ15BLefCRW8Tcg_ZNSc&code_challenge_method=S256&nonce=019bea45-02c7-7346-a169-7fb4b338a6d5&state=eyJpZCI6IjAxOWJlYTQ1LTAyYzctNzc0My04ZTdjLTQ3OGU0MzY3MTc0NSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #90,592 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 78%

Risk Score

Page hosts a credential‑collecting login form on a well‑known brand subdomain with highly obfuscated JavaScript, indicating a high‑risk phishing attempt.

Risk Factors

Credential collection form on brand domain

High JavaScript obfuscation score

Garbage phishing‑style text in page content

Safety Factors

Domain age 8749 days (well‑established)

No Indicators of Compromise matches

No YARA malware detections

No network IDS alerts

Cross‑origin form appears to be a legitimate Microsoft SSO flow

Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 7 to 2

Domain age information unavailable

Details

Page Title

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Screenshot

Page Load Overview

12.04s

Total Load Time

HTTP Requests

Domains

541 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:en

Text Length:187 chars

Detector Agreement:67%

Website Classification

Primary Category

cryptocurrency blockchain77% confidence

Type: webapp

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

77%

finance banking

27%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	68.220.41.20	San Jose, California, United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
10	2.23.246.74	Frankfurt am Main, Hesse, Germany	AS16625AKAMAI-AS
10	13.107.246.44	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
10	144.24.190.49	Frankfurt am Main, Hesse, Germany	AS31898ORACLE-BMC-31898
10	20.190.160.131	Unknown	Unknown
10	20.190.159.0	Unknown	Unknown
10	52.230.234.174	Des Moines, Iowa, United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
10	20.190.160.128	Unknown	Unknown
10	23.207.210.137	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
94	9	-	-