Security Scan: Sign in to your account

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/96740267-532b-4a14-b043-52b618b98860 Domain and IP registration (RDAP)/api/v1/rdap/96740267-532b-4a14-b043-52b618b98860How often this domain was scanned/api/v1/domain/stats/login.office-sharepoint.com Scan history for this domain/api/v1/domain/history/login.office-sharepoint.com?limit=15

This website contacted 3 IPs in 1 country across 4 domains to perform 8 HTTP transactions. The main domain is office-sharepoint.com and was registered 2 weeks ago.

Submitted URL: https://login.office-sharepoint.com/onedrive=PortalHome&redirfrom=userTypeCookie&redirfrom=ac248aae-4524-47b2-9952-7abdc65589d6

AI Security Verdict

High Risk

Confidence: 72%

Risk Score

Domain login.office-sharepoint.com impersonates a Microsoft SharePoint/OneDrive login portal, including a lookalike aadcdn subdomain and portal-style redirect URL. No credential form was captured, but the deceptive hostname is a strong brand-impersonation signal.

Risk Factors (4)

Deceptive hostname impersonating a Microsoft login portal on a non-Microsoft domain

Lookalike CDN subdomain designed to resemble Microsoft's msauth CDN naming

URL crafted to look like a OneDrive/SharePoint portal redirect with a user-type cookie GUID

No verifiable site identity or content behind the impersonation shell

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: -2057558656

MD5: 12e3dac858061d088023b2bd48e2fa96

Domain Name Analysis

The domain name 'login.office-sharepoint.com' uses the commercial generic top-level domain (.com) and includes subdomain 'login'. The core label 'office-sharepoint' covers 17 characters holding 7 vowels versus nine consonants, notching 1 hyphen. It segments into 3 words: office, share, point. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

76.80s

Total Load Time

164 KB

Total Size

Language Analysis

Primary Language

🏳️UNKNOWN

Code: unknown

Confidence:0%

Detection Details

Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	104.21.78.176Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.136.36Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	13.107.246.44Azure · CLOUD	United States	AS8075Microsoft Corporation
0	3	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10FE3C06BDF41295ADBD46D30E8BE3D0D777D088228C88599E30ED8488C7BD1668BF45B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:2X3/ENUnFbY/HaCQwmrsG30loYoUFUxUAd6KGUKeRbJXwla/AE:cvDY/615rsGkPo2W1GzeRbJiav

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:152615:yKdbIIliBE0iRdQwKjCxhCAiBGvQDcmCFSgQgCcBCIB6IYlBYYeMAAIQbbIhCAIKBFBCQVDEEoBO9lESxIiKRIqoY1Qiug0Q

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: login.office-sharepoint.com