Security Scan: Sign in to your account

Summary

This website contacted 11 IPs in 4 countries across 7 domains to perform 32 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://heiway-my.sharepoint.com

Effective URL: https://login.microsoftonline.com/66e853de-ece3-44dd-9d66-ee6bdf4159d4/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&ear%5Fjwe%5Fcrypto=eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTI1NkdDTSIsImFwdiI6IkFBQUFDVVZoY2tOc2FXVnVkR2dBQUFCRlEwc3pNQUFBQU9xQlVETWdVa0w3aWRDSS81N3pQTlVOSWMrRDhmSG40WXlsdmdMZnB1V2VRbkp0T3diaTh6UkE5L29vcE05WmFCZ1FvUjNJQ2ZMb3pTWnlFclZCclArSENFbUZrNDJzVHE5OWViYm9lR1VjV0plZGRXZnVoR0U4RTBqVnpqcXpEZ0FBQUJpZ0xJMjhMcEFIRzhCMFlhNWY2UzBvVkl0RndaSzdGNlE9In0%3D&ear%5Fjwk=eyJhbGciOiJFQ0RILUVTIiwiY3J2IjoiUC0zODQiLCJ4IjoiQUFBQU1PcUJVRE1nVWtMN2lkQ0kvNTd6UE5VTkljK0Q4ZkhuNFl5bHZnTGZwdVdlUW5KdE93Ymk4elJBOS9vb3BNOVphQT09IiwieSI6IkFBQUFNQmdRb1IzSUNmTG96U1p5RXJWQnJQK0hDRW1GazQyc1RxOTllYmJvZUdVY1dKZWRkV2Z1aEdFOEUwalZ6anF6RGc9PSIsImt0eSI6IkVDIn0%3D&spa%5Fclient%5Fid=08e18876%2D6177%2D487e%2Db8b5%2Dcf950c1e598c&client%5Finfo=1&response%5Ftype=code%20id%5Ftoken%20spa%5Frt&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=A0D0BEA8EB34357AB3B390EA65CE9C3374BABA192C406B9D%2D84912008D7BFFF5A5A1851554A8F6A4E31F35D63D18C1C655FDE56882B71C8D0&redirect%5Furi=https%3A%2F%2Fheiway%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=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&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=5d3926a2%2Dc0d5%2D2001%2D10b3%2Da7c4e832b114&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #66 of the top 1 million websitesTop 100 Site

AI Security Verdict

Low Risk

Confidence: 92%

Risk Score

Phishing page impersonating HEINEKEN to harvest credentials; high confidence of scam.

Risk Factors

Brand impersonation

Credential harvesting form

Domain mismatch with brand

Obfuscated JavaScript (high score) used in login page

Safety Factors

Form posts to legitimate Microsoft authentication endpoint

No Indicators of Compromise or malicious YARA detections

No network IDS alerts

Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 9 to 2

Domain age information unavailable

Details

Page Title

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Screenshot

Page Load Overview

1.44s

Total Load Time

HTTP Requests

Domains

510 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:en

Text Length:109 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software26% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

26%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	13.107.246.44Azure · CLOUD	United States	AS8075Microsoft Corporation
2	13.107.138.10Office365 · CLOUD	Redmond, Washington, United States	AS8075Microsoft Corporation
2	23.207.210.136	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	13.107.136.10Azure · CLOUD	Redmond, Washington, United States	AS8075Microsoft Corporation
2	20.190.160.65Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
2	40.126.32.138Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
2	20.190.160.67Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
2	40.126.31.69Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
2	20.190.160.131Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
2	20.190.160.128Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
32	11	-	-