Security Scan Report: leedsbuildingsociety.file.force.com

Redirected to: https://login.microsoftonline.com/6e97e4e4-ed40-4c38-8b4d-283573e82080/saml2?SAMLRequest=lZPRcqIwFIZfhck9CgEEmWoHZEVbaUFpLdw4CBGzQqIJSPHpS227092LzuyZ5CJzTv7%2FnMyXm9vXshDOiHFMyQjIPQkIiKQ0wyQfgadwKhrgdnzDk7KAR9Oqqz1ZolONeCV0Fwk3PzIjUDNi0oRjbpKkRNysUnNleQsT9iTzyGhFU1oAweIcsaqzmlDC6xKxFWJnnKKn5WIE9lV15Ga%2FXyCU8W2Ni%2FcmOE0xqtpe2fZ4UiC%2BoyxFvZSWt5yOJMmRIuk95INdqEBwusYwSarrMH%2F0aI5Jr8Qpo5zuKkoKTK4S%2FQEa6khFqogyVRLVVDFEY6tmIjQUTVeQASVD6l8nBMLcGYENnFhdxI1nZTjyHKv5d3dZ2zrBtecy5MQzqEVtPPylucPUPS4v0yN7OWfry%2FrFti%2Fx3d16TrcxI026wnIqRoqIIdYbJb6wdrXJJtbpoGXx4rlqHqc7qOvPMNIDqRVX5TSw%2FYBHQWwpD4o%2BnJAyCgt3vtMWtq5Ifnxp3ftiwdp8c2%2FXR7E9DPYnfD94zTdu4EDnQZ3r1rnZrjG6QPVFt9hyYWiBAcUHRzn5e1S23tnxXY%2Bem0BmQ3WZ79SDq9bRIjeqZfi7EOEmH%2FrezAmVLJ5PXTE0Jt4%2BVerZkyo33WtxXqM54VVCqhGAEhyIktytECqmNDBlpTfQ5BgI%2FicaNiYfyP3E0fajiJuzMPRF%2F3EVAuH5C92uAHyCal7d2XdCfxZOvrAE4%2F%2BD8Kb%2F3XD8efz7o4zfAA%3D%3D&RelayState=%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=bSNB2aUSQEUzSlCg80K9Nti8n67ZGCpRqywvmmo9pOeFVo09J7KLxaon2fI%2BDkHMPinsF7Pml%2Br0bsU3%2FdFnrUVDprT1bXba5zTYrpNDCzujnyk4IkjGl4bV4LaMhRRYtgO4C8UOqVnERnXLoKA%2FXGmyMYSwpcQGKJmrX4uzbnIbjf4G00RMJLLJqM7zbJA9OI%2F0kxgnmGDgsykfV%2Bzg4od2GJVy8Ms%2BTY%2BWVQp7ZyY5IeqzcfPrewZ6wTpLUsot0fhZ4uniQuW9knZxY2lEPs9%2FgOUVJvSJNz6xZ7prLf7HdBWzgPBDob9K67FRcGBaxzl6tZHFmhNe%2B%2BQ%2BBGJ%2FG0rWBX6RJvdPNZ9mwHc1iRI%2FMv4hy3q9s14xx7qkc1Pvb0sL3zHsFF4eunVcik0L5kor4rSXtwLEeTfzHUgD6IPQW5kQ2Vri9CKHOTwsmkXHZpMwqpVgf1%2BYLFg%2FSPh4VosLTeeOwdJiOJGiv%2BnvqiJpbMlwtJd37dibzd5J9yUoUkOMchAliwPPWhauHYI0g82qENADrq2kmK6%2FaXDrkOShKEwyI4O9hjQTNFkVBfWjlMGf31b0pBReiqQ50gk1jAfKVvCfUrPTE5BfIlBd3jC1gTCioCGh5Z9eukd4Ld%2B4OM7juReCHR1qXcKsO5L9EdTQz%2Fdh%2B4H6AWexT34K0BA%3D&sso_reload=true

Site favicon
Submitted: Jan 1, 2026, 11:06:09 PMCompleted: Jan 1, 2026, 11:07:22 PMpubliccompleted
Loading additional data...

Summary

This website contacted 12 IPs in 4 countries across 8 domains to perform 43 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://leedsbuildingsociety.file.force.com

Effective URL: https://login.microsoftonline.com/6e97e4e4-ed40-4c38-8b4d-283573e82080/saml2?SAMLRequest=lZPRcqIwFIZfhck9CgEEmWoHZEVbaUFpLdw4CBGzQqIJSPHpS227092LzuyZ5CJzTv7%2FnMyXm9vXshDOiHFMyQjIPQkIiKQ0wyQfgadwKhrgdnzDk7KAR9Oqqz1ZolONeCV0Fwk3PzIjUDNi0oRjbpKkRNysUnNleQsT9iTzyGhFU1oAweIcsaqzmlDC6xKxFWJnnKKn5WIE9lV15Ga%2FXyCU8W2Ni%2FcmOE0xqtpe2fZ4UiC%2BoyxFvZSWt5yOJMmRIuk95INdqEBwusYwSarrMH%2F0aI5Jr8Qpo5zuKkoKTK4S%2FQEa6khFqogyVRLVVDFEY6tmIjQUTVeQASVD6l8nBMLcGYENnFhdxI1nZTjyHKv5d3dZ2zrBtecy5MQzqEVtPPylucPUPS4v0yN7OWfry%2FrFti%2Fx3d16TrcxI026wnIqRoqIIdYbJb6wdrXJJtbpoGXx4rlqHqc7qOvPMNIDqRVX5TSw%2FYBHQWwpD4o%2BnJAyCgt3vtMWtq5Ifnxp3ftiwdp8c2%2FXR7E9DPYnfD94zTdu4EDnQZ3r1rnZrjG6QPVFt9hyYWiBAcUHRzn5e1S23tnxXY%2Bem0BmQ3WZ79SDq9bRIjeqZfi7EOEmH%2FrezAmVLJ5PXTE0Jt4%2BVerZkyo33WtxXqM54VVCqhGAEhyIktytECqmNDBlpTfQ5BgI%2FicaNiYfyP3E0fajiJuzMPRF%2F3EVAuH5C92uAHyCal7d2XdCfxZOvrAE4%2F%2BD8Kb%2F3XD8efz7o4zfAA%3D%3D&RelayState=%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=bSNB2aUSQEUzSlCg80K9Nti8n67ZGCpRqywvmmo9pOeFVo09J7KLxaon2fI%2BDkHMPinsF7Pml%2Br0bsU3%2FdFnrUVDprT1bXba5zTYrpNDCzujnyk4IkjGl4bV4LaMhRRYtgO4C8UOqVnERnXLoKA%2FXGmyMYSwpcQGKJmrX4uzbnIbjf4G00RMJLLJqM7zbJA9OI%2F0kxgnmGDgsykfV%2Bzg4od2GJVy8Ms%2BTY%2BWVQp7ZyY5IeqzcfPrewZ6wTpLUsot0fhZ4uniQuW9knZxY2lEPs9%2FgOUVJvSJNz6xZ7prLf7HdBWzgPBDob9K67FRcGBaxzl6tZHFmhNe%2B%2BQ%2BBGJ%2FG0rWBX6RJvdPNZ9mwHc1iRI%2FMv4hy3q9s14xx7qkc1Pvb0sL3zHsFF4eunVcik0L5kor4rSXtwLEeTfzHUgD6IPQW5kQ2Vri9CKHOTwsmkXHZpMwqpVgf1%2BYLFg%2FSPh4VosLTeeOwdJiOJGiv%2BnvqiJpbMlwtJd37dibzd5J9yUoUkOMchAliwPPWhauHYI0g82qENADrq2kmK6%2FaXDrkOShKEwyI4O9hjQTNFkVBfWjlMGf31b0pBReiqQ50gk1jAfKVvCfUrPTE5BfIlBd3jC1gTCioCGh5Z9eukd4Ld%2B4OM7juReCHR1qXcKsO5L9EdTQz%2Fdh%2B4H6AWexT34K0BA%3D&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #1,491 of the top 1 million websitesTop 10K Site

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Likely phishing site collecting Microsoft credentials on a third‑party domain.

Risk Factors
Credential harvesting via password field on a non‑official domain
Brand impersonation of Microsoft on an unrelated Salesforce subdomain
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

The domain 'leedsbuildingsociety.file.force.com' uses the commercial generic top-level domain (.com), featuring subdomain 'leedsbuildingsociety.file'. Its registrable label 'force' stretches across 5 characters holding 2 vowels versus three consonants. Word splitting yields 1 word: force. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://leedsbuildingsociety.file.force.com

Page Load Overview

1.95s
Total Load Time
29
HTTP Requests
7
Domains
433 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:109 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
735.158.127.53Netherlands
220.190.159.75United States
223.207.210.137France
252.178.17.2SwedenUnknown
220.190.160.14UnknownUnknown
220.190.159.64UnknownUnknown
240.126.32.133UnknownUnknown
223.207.210.132UnknownUnknown
213.107.246.44UnknownUnknown
213.107.213.44UnknownUnknown
2912--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E3734BD67EB72937C64A45B9A4B56E02AA7A5D038D4CCD60F18CCC842FEB74C8433657

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:jqHP8GLGGBBffX9Pxg2fzzTEyqU6MVnvnaloMPt3EviikAC:WHP8CBffX9Px5fmyS2iAC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:79926:LDggkioAYIBAcCBUAvSwjQACsAyAxUGOIgFeYaGogA6yJrKjUYRJxFYgEgCLIBAMQhkQJ0ikQlhwQAR0ANIAhKhReAGs8RsA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0010393b373f373f
Perceptual Hash:845971764699d96e
Difference Hash:88e4d2d3e5eee6e6
Wavelet Hash:00003b3b373f373f
Color Hash:#40b7bf

Other Hashes

Crop Resistant:88e4d2d3e5eee6e6

Scan History

Scan history not available

Unable to load historical scan data