Domain 'oauth.officeapps.live.com' uses the commercial generic top-level domain (.com), featuring subdomain 'oauth.officeapps'. Count 4 characters in 'live' holding 2 vowels versus two consonants. Breaking it apart gives 1 word: live. No strong language cues emerged from the frequency lists.

html/7a/38/7a38285f-82a6-46f0-96c7-83a3cdd13c79.html.gz

default-src 'self';base-uri 'self';script-src 'nonce-PHuYyxgrlX5IunYY++FcDA==' 'strict-dynamic' 'report-sample' https:;report-to csp-endpoint;upgrade-insecure-requests;style-src 'self' 'report-sample' *.cdn.office.net *.microsoft.com res-dev.cdn.officeppe.net 'unsafe-inline' https://www.microsoft.com/;font-src 'self' data: *.cdn.office.net res-dev.cdn.officeppe.net data c.s-microsoft.com *.microsoft.com;connect-src 'self' https://browser.pipe.aria.microsoft.com https://browser.events.data.microsoft.com *.office.com *.cdn.office.net res-dev.cdn.officeppe.net https://consentreceiverfd-prod.azurefd.net https://*.clarity.ms/collect https://turbo.microsoft.com https://deeplinkservice.svc.cloud.microsoft https://sdf.deferreddeeplinkservice.microsoft.com data:;frame-src https://login.microsoftonline.com https://login.live.com mem.gfx.ms amcdn.msftauth.net amcdn.msauth.net;img-src * data: blob:;worker-src 'self' blob:;child-src 'self' blob:;report-uri https://csp.microsoft.com/report/Harmony-App-PROD;form-action https://login.microsoftonline.com;frame-ancestors 'self';

default-src 'self';base-uri 'self';script-src 'nonce-kF/7e7fGU3kYuraiuAVw7w==' 'strict-dynamic' 'report-sample' https:;report-to csp-endpoint;upgrade-insecure-requests;style-src 'self' 'report-sample' *.cdn.office.net *.microsoft.com res-dev.cdn.officeppe.net 'unsafe-inline' https://www.microsoft.com/;font-src 'self' data: *.cdn.office.net res-dev.cdn.officeppe.net data c.s-microsoft.com *.microsoft.com;connect-src 'self' https://browser.pipe.aria.microsoft.com https://browser.events.data.microsoft.com *.office.com *.cdn.office.net res-dev.cdn.officeppe.net https://consentreceiverfd-prod.azurefd.net https://*.clarity.ms/collect https://turbo.microsoft.com https://deeplinkservice.svc.cloud.microsoft https://sdf.deferreddeeplinkservice.microsoft.com data:;frame-src https://login.microsoftonline.com https://login.live.com mem.gfx.ms amcdn.msftauth.net amcdn.msauth.net;img-src * data: blob:;worker-src 'self' blob:;child-src 'self' blob:;report-uri https://csp.microsoft.com/report/Harmony-App-PROD;form-action https://login.microsoftonline.com;frame-ancestors 'self';

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Login | Microsoft 365 Copilot

⚡ Medium Risk - https://oauth.officeapps.live.com/

Requests	IP Address	Location	AS Autonomous System
14	52.108.8.12	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
9	104.102.45.22	Frankfurt am Main, Hesse, Germany	AS16625AKAMAI-AS
9	13.107.213.44	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
9	13.107.6.156	United States	AS8068MICROSOFT-CORP-MSN-AS-BLOCK
9	20.250.198.32	Zurich, Zurich, Switzerland	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
9	23.44.215.201	Prague, Prague, Czech Republic	AS20940Akamai International B.V.
9	52.108.9.12	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
9	23.44.215.193	Prague, Prague, Czech Republic	AS20940Akamai International B.V.
9	23.52.181.212	Frankfurt am Main, Hesse, Germany	AS16625AKAMAI-AS
9	13.107.246.44	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
104	11	-	-

Security Scan Report: oauth.officeapps.live.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History