Security Scan: Sign in to your account

Summary

This website contacted 9 IPs in 3 countries across 5 domains to perform 19 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://mana-ericsson.my.site.com

Effective URL: https://login.microsoftonline.com/92e84ceb-fbfd-47ab-be52-080c6b87953f/saml2?SAMLRequest=fZNdc6IwFIb%2FCpOLvUMjAiItdqD4AWL9ALV64wQMFoWEkiCVX7%2ButjPdndmemVzknJP3zZk8eXz6yFLhjAuWUGKAVgMCAZOI7hNyMMAyGIgaeOo9MpSlUq6bJX8jC%2FxeYsaF60HC9HvFAGVBdIpYwnSCMsx0Hum%2BOfF0qQH1vKCcRjQFgskYLvjV6pkSVma48HFxTiK8XHgGeOM8Z3qzmSGCRFwkEWOUNLJLgyUcNyKaNVN6SMgTowaEtmrCP9E6TV4Hv1CWP7DIgF6%2FTe%2FpeWd8AIJ9vWhCEL8N96V%2FU2lkSVRQRmNOSZqQu35Xwpoc4VCMw3gvyh0UiiFWJBFqMFJDrdNV2nHzNjEQHNsAO%2BnZvMZWrXy76E5ss%2Fp3XauWNT6567pT1%2BvVfDemF2WanxUnOXsxq4rhKnNlTdxoxxwd5Zl3VFV1q0h1GuLy5JzkEUfeJBaH1tpeKjifh8P3t6qqjhupFocyt9NhOTexP167w8vLhIjrcs9e3HPbbm0qb18EDqJTqW9xpDJnqm1Gu7WF69M531lrWNn5aeD0FeasxC07z3nop26VkiOEWhEtfNZqT7qbFaxdvsRztPh4ieKPzPPlbLrbhv781JKrkewdTM8NdhYLnpVy7PYt35F4ux6%2F2op4mQw628X1IRzGSuwQxhHhBpCgpIpQEVvtAKq6rOqS3FChtgXC7BMVKyF3BH%2FiKrw3MX0UBDNxNvUDIKy%2BUL42gE9w9Zt78Z3Yn4XRF6ag938oUYpZTIvohs5j87tT73P794%2Fp%2FQY%3D&RelayState=%2Fs%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=UyYmHjia4WyOhgjTtAnn94sjxGuPtib0WpNSOgOP271MskwClW%2BvYUwXFDG7IYtA6N6PfH2l4SwXVM2UTo5TflrYya4Apzo5Lgt7p5S%2FL3j4hTnG89SVwLkxOWz6BhU84Ph%2BmCsil8KlmNmY1VYpzsuR2Q3lBSUIgtko7QmvXDnNjyg1gZvw6zByUclgcf1%2BawrKCFAHesj0vS0dU7i4kij87BVDoLsbP2NKFRyr0xpGCtDz%2FQK1GufoeIpNW3V%2BxTJPtj3E2kSoITWZnaYXDwOo1XHcP2Dc%2FkGjKUW41n2ktZOfr3uvd4tHY6Nd5B3qPepnPX65frZ3dLBwt9CrWw%3D%3D&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #3,267 of the top 1 million websitesTop 10K Site

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

The site impersonates Ericsson’s login page on an unrelated domain, uses obfuscated scripts and triggers critical IDS alerts, indicating a confirmed credential phishing scam.

Risk Factors

Brand impersonation with credential collection

Critical network IDS alert indicating possible malware exfiltration

Highly obfuscated JavaScript code

Cross‑origin SSO flow used to mask phishing intent

Domain age information unavailable

Details

Page Title

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Screenshot

Page Load Overview

2.02s

Total Load Time

HTTP Requests

Domains

466 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:en

Text Length:811 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software34% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

34%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	20.190.159.128	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
2	13.107.246.44	United States	AS8075Microsoft Corporation
2	23.36.162.210	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	23.36.162.214	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	23.36.162.219	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	23.207.210.137	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	23.207.210.132	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	20.190.159.23	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
2	40.126.31.131	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
19	9	-	-