Security Scan Report: onedrive.live.com

Redirected to:
https://login.live.com/login.srf?wa=wsignin1%2E0&rpsnv=208&ct=17939926...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 3 countries across 8 domains to perform 19 HTTP transactions. The main domain is live.com and was registered 31 years ago.

Submitted URL: https://onedrive.live.com/download?cid=936F66742226EAF0&resid=936F66742226EAF0%21105&authkey=AITnwNmVUumu2oo

Effective URL:
https://login.live.com/login.srf?wa=wsignin1%2E0&rpsnv=208&ct=17939926...
Redirected

The Cisco Umbrella rank of the primary domain is #7 of the top 1 million websitesTop 100 Site

AI Security Verdict

Safe Website

Confidence: 97%

0
Risk Score

Genuine Microsoft sign-in flow: OneDrive download link redirects to live.com's authentic login endpoint on a 31-year-old top-ranked domain, with no password harvesting, exfiltration or threat-intel hits.

Safety Factors (4)
31-year-old well-established domain with top-100 Cisco Umbrella ranking
Both redirect hops resolve to Microsoft-operated hosts (onedrive.live.com, login.live.com, logincdn.msftauth.net)
Standard account-authentication UI text ('Use your Microsoft account', 'Forgot your username?', Terms/Privacy links) with no urgency or payment collection
No credential-harvesting behavior: no password field, no cross-origin credential exfiltration
Domain age information unavailable

Details

Page Title

Sign in

Scan Type

public

Domain Name Analysis

The domain name 'onedrive.live.com' uses the commercial generic top-level domain (.com), featuring subdomain 'onedrive'. Its registrable label 'live' stretches across 4 characters containing two vowels alongside 2 consonants. Segmentation suggests one word: live. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://onedrive.live.com/download?cid=936F66742226EAF0&resid=936F66742226EAF0%21105&authkey=AITnwNmVUumu2oo

Page Load Overview

7.07s
Total Load Time
823 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:EN-US
Text Length:522 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software68% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
68%
documentation technical
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
520.190.159.64Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
140.126.31.131Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
113.107.139.11Office365 · CLOUDRedmond, Washington, United States
AS8075Microsoft Corporation
123.76.204.9Akamai · CDNSchiphol, North Holland, Netherlands
AS20940Akamai International B.V.
120.86.88.94Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
140.126.31.1Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
120.190.159.128Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
113.107.137.11Office365 · CLOUDRedmond, Washington, United States
AS8075Microsoft Corporation
140.126.31.129Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
123.76.204.36Akamai · CDNSchiphol, North Holland, Netherlands
AS20940Akamai International B.V.
1915--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T180435DA93A001139C7437BE4F09E7B0C7136AD3B9B84EC98E59CCDD518D5AFA4A97309

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:4QTVMtwxvQUwzC9jMw9E9LrPttAmmCRCtCNebKke:FMmv2zdryC8oOW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:59526:SLAAmwKeRuAE2AowHEA0ARRGUiFRinBhEU9EMNIGaIgwoSGMgNgAEZoikCAAMxoiIlCgUUAClTBgAXYFLACCebAFYBSIaMM4

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00383b27273f7777
Perceptual Hash:8759dc546371d98c
Difference Hash:88e2f2cdcdeae6e6
Wavelet Hash:00183b233f3f3737
Color Hash:#522d86

Other Hashes

Crop Resistant:88e2f2cdcdeae6e6

Scan History

Scan history not available

Unable to load historical scan data