Domain 'nexusrules.officeapps.live.com' uses the commercial generic top-level domain (.com) with subdomain 'nexusrules.officeapps'. The core label 'live' covers 4 characters with 2 vowels and two consonants. Breaking it apart gives 1 word: live. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

html/80/93/8093d89c-faa7-4df3-9024-ed23946708b8.html.gz

default-src 'self';base-uri 'self';script-src 'nonce-HnmHBW04la/lnt8kGWiWNw==' 'strict-dynamic' 'report-sample' https:;report-to csp-endpoint;upgrade-insecure-requests;style-src 'self' 'report-sample' *.cdn.office.net *.microsoft.com res-dev.cdn.officeppe.net 'unsafe-inline' https://www.microsoft.com/;font-src 'self' data: *.cdn.office.net res-dev.cdn.officeppe.net data c.s-microsoft.com *.microsoft.com;connect-src 'self' https://browser.pipe.aria.microsoft.com https://browser.events.data.microsoft.com *.office.com *.cdn.office.net res-dev.cdn.officeppe.net https://consentreceiverfd-prod.azurefd.net https://*.clarity.ms/collect https://turbo.microsoft.com https://deeplinkservice.svc.cloud.microsoft https://sdf.deferreddeeplinkservice.microsoft.com data:;frame-src https://login.microsoftonline.com https://login.live.com mem.gfx.ms amcdn.msftauth.net amcdn.msauth.net;img-src * data: blob:;worker-src 'self' blob:;child-src 'self' blob:;report-uri https://csp.microsoft.com/report/Harmony-App-PROD;form-action https://login.microsoftonline.com;frame-ancestors 'self';

default-src 'self';base-uri 'self';script-src 'nonce-jymnsQ3gP8YAVSpTGrsggw==' 'strict-dynamic' 'report-sample' https:;report-to csp-endpoint;upgrade-insecure-requests;style-src 'self' 'report-sample' *.cdn.office.net *.microsoft.com res-dev.cdn.officeppe.net 'unsafe-inline' https://www.microsoft.com/;font-src 'self' data: *.cdn.office.net res-dev.cdn.officeppe.net data c.s-microsoft.com *.microsoft.com;connect-src 'self' https://browser.pipe.aria.microsoft.com https://browser.events.data.microsoft.com *.office.com *.cdn.office.net res-dev.cdn.officeppe.net https://consentreceiverfd-prod.azurefd.net https://*.clarity.ms/collect https://turbo.microsoft.com https://deeplinkservice.svc.cloud.microsoft https://sdf.deferreddeeplinkservice.microsoft.com data:;frame-src https://login.microsoftonline.com https://login.live.com mem.gfx.ms amcdn.msftauth.net amcdn.msauth.net;img-src * data: blob:;worker-src 'self' blob:;child-src 'self' blob:;report-uri https://csp.microsoft.com/report/Harmony-App-PROD;form-action https://login.microsoftonline.com;frame-ancestors 'self';

default-src 'self';base-uri 'self';script-src 'nonce-HfgKn7sSNR4VmF8CnEFfpg==' 'strict-dynamic' 'report-sample' https:;report-to csp-endpoint;upgrade-insecure-requests;style-src 'self' 'report-sample' *.cdn.office.net *.microsoft.com res-dev.cdn.officeppe.net 'unsafe-inline' https://www.microsoft.com/;font-src 'self' data: *.cdn.office.net res-dev.cdn.officeppe.net data c.s-microsoft.com *.microsoft.com;connect-src 'self' https://browser.pipe.aria.microsoft.com https://browser.events.data.microsoft.com *.office.com *.cdn.office.net res-dev.cdn.officeppe.net https://consentreceiverfd-prod.azurefd.net https://*.clarity.ms/collect https://turbo.microsoft.com https://deeplinkservice.svc.cloud.microsoft https://sdf.deferreddeeplinkservice.microsoft.com data:;frame-src https://login.microsoftonline.com https://login.live.com mem.gfx.ms amcdn.msftauth.net amcdn.msauth.net;img-src * data: blob:;worker-src 'self' blob:;child-src 'self' blob:;report-uri https://csp.microsoft.com/report/Harmony-App-PROD;form-action https://login.microsoftonline.com;frame-ancestors 'self';

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Microsoft 365 Copilot | Create, Share and Collaborate with Office and AI

⚡ Medium Risk - https://nexusrules.officeapps.live.com/

Requests	IP Address	Location	AS Autonomous System
13	13.107.246.44	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
13	23.35.237.160	Frankfurt am Main, Hesse, Germany	AS16625AKAMAI-AS
13	104.102.45.22	Frankfurt am Main, Hesse, Germany	AS16625AKAMAI-AS
13	52.111.243.30	Amsterdam, North Holland, Netherlands	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
13	20.250.198.32	Zurich, Zurich, Switzerland	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
13	2.19.126.140	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
13	23.35.229.160	Frankfurt am Main, Hesse, Germany	AS16625AKAMAI-AS
13	2.19.126.142	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
13	13.107.6.156	United States	AS8068MICROSOFT-CORP-MSN-AS-BLOCK
13	2.19.126.154	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
137	10	-	-

Security Scan Report: nexusrules.officeapps.live.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History