Security Scan: Sign in to Microsoft Azure

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4b42e396-7b91-4370-b51d-968ad4e7afbe Domain and IP registration (RDAP)/api/v1/rdap/4b42e396-7b91-4370-b51d-968ad4e7afbeHow often this domain was scanned/api/v1/domain/stats/enterpriseenrollment.havot.fi Scan history for this domain/api/v1/domain/history/enterpriseenrollment.havot.fi?limit=15

This website contacted 17 IPs in 5 countries across 9 domains to perform 23 HTTP transactions. The main domain is havot.fi and was registered 18 years ago.

Submitted URL: https://enterpriseenrollment.havot.fi

Effective URL:

https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?...

Redirected

AI Security Verdict

Low Risk

Confidence: 65%

Risk Score

Redirect from enterpriseenrollment.havot.fi lands on Microsoft's authentic login.microsoftonline.com sign-in; no phishing form, no exfiltration, no threat-intel hits. Only the unrelated 'enterpriseenrollment' entry subdomain is mildly suspicious.

Risk Factors (2)

Entry subdomain enterpriseenrollment.havot.fi uses Microsoft Intune/'enterprise enrollment' naming on a domain unrelated to Microsoft, a lure-style hostname even though it forwards to the real Microsoft login

Entry domain is unranked in Cisco Umbrella and displays no content of its own — it is only a redirector

Safety Factors (4)

Final page is Microsoft's genuine login.microsoftonline.com sign-in with authentic Microsoft form action and hidden anti-CSRF tokens

No credential exfiltration: the login form posts to login.microsoftonline.com, not to the entry domain

No Indicators of Compromise, no JavaScript malware/hunting-rule hits, no IDS alerts, no known phishing kit in the roster

Entry domain havot.fi is 24 years old and the redirect chain is a single ordinary cross-domain hop

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: -2057558656

MD5: 12e3dac858061d088023b2bd48e2fa96

Domain Name Analysis

Within the Finnish country-code top-level domain (.fi), 'enterpriseenrollment.havot.fi' is registered with subdomain 'enterpriseenrollment'. The core label 'havot' covers 5 characters containing 2 vowels alongside three consonants. Tokenizing the label suggests three words: ha, vo, t. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.87s

Total Load Time

833 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:187 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

77%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	40.126.31.130Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
1	13.74.111.192Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
1	150.171.84.43Azure · CLOUD	United States	AS8075Microsoft Corporation
1	20.184.175.3Azure · CLOUD	San Jose, California, United States	AS8075Microsoft Corporation
1	20.190.159.131Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
1	13.107.246.61Azure · CLOUD	United States	AS8075Microsoft Corporation
1	20.52.64.205Azure · CLOUD	Frankfurt am Main, Hesse, Germany	AS8075Microsoft Corporation
1	52.236.189.96Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
1	150.171.84.26Azure · CLOUD	United States	AS8075Microsoft Corporation
1	20.190.160.4Office365 · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
23	17	-	-