Security Scan Report: portal.microsoftonline.com

Redirected to:
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 4 countries across 8 domains to perform 24 HTTP transactions. The main domain is microsoftonline.com and was registered 24 years ago.

Submitted URL: https://portal.microsoftonline.com

Effective URL:
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_...
Redirected

The Cisco Umbrella rank of the primary domain is #8 of the top 1 million websitesTop 100 Site

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

Genuine Microsoft account sign-in: 24-year-old microsoftonline.com domain, all redirects and form posts stay on Microsoft hosts, no threat-intel, hunting rule or exfiltration evidence.

Safety Factors (5)
Established 24-year-old domain with top-100 global reputation (Umbrella rank #8)
All redirect hops and form submissions remain within Microsoft-owned domains
Login form is Microsoft's own first-party sign-in — self-branding, not impersonation
Cross-origin traffic limited to Microsoft telemetry endpoint (eu-mobile.events.data.microsoft.com, rank #735) and Microsoft CDNs (aadcdn.msauth.net, aadcdn.msftauth.net)
Only MEDIUM informational Suricata alerts (ET INFO Microsoft OAuth 2.0 Device Auth Activity), which are descriptive telemetry, not phishing/malware signatures
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Domain Name Analysis

Domain 'portal.microsoftonline.com' uses the commercial generic top-level domain (.com) with subdomain 'portal'. The registrable portion 'microsoftonline' spans 15 characters containing six vowels alongside nine consonants. Breaking it apart gives two words: microsoft, online. Median word length comes out to 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Microsoft Sign in Email, phone, or Skype No account? Create one! Can’t access your account? G Continue with Google @ Continue with Apple ‘Terms of use Privacy & cookies

Page Load Overview

0.87s
Total Load Time
494 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:196 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software65% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
65%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1413.107.246.44Azure · CLOUDUnited States
AS8075Microsoft Corporation
220.190.159.128Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
2150.171.74.13Azure · CLOUDUnited States
AS8075Microsoft Corporation
2150.171.73.13Azure · CLOUDUnited States
AS8075Microsoft Corporation
240.126.31.131Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
24.207.44.67Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
223.103.244.90Azure · CLOUDBerlin, State of Berlin, Germany
AS8075Microsoft Corporation
223.207.210.136Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
220.190.159.73Office365 · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
220.190.159.23Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
2412--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F9A36DE97EA72A3B828A84B5B5B53E02AE369D07484DDD64F58C8C841FFE71CC127513

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:FNFzNz9zH8GLG2oezRpaHEeghzlnovIZ9Tjuokmap5vPoMLufO0fiiQYhBFC:TFzNz9zH8dezRpaHHIBn3a/AKg7C

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:106379:DXgAEAktHIQgA2FSohohAhIEEoOAIgIKxCsCGkGqCBAIpnOCvBiARRgEBEMlMwKoBootVfkJBA/0SBICEjhIAYZTgESwQEwk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00183933373f3737
Perceptual Hash:8559717666739989
Difference Hash:88f2d2e7e5dae6e6
Wavelet Hash:001839333f3f3737
Color Hash:07000000180

Other Hashes

Crop Resistant:88f2d2e7e5dae6e6

Scan History

Scan history not available

Unable to load historical scan data