ScanMalware.com

Security Scan Report: roombooking.ifm

Redirected to:
https://login.microsoftonline.com/2782ef14-4849-46b4-b90d-d7e83fc425ca...
Site favicon
Submitted: Dec 1, 2025, 6:50:02 PMCompleted: Dec 1, 2025, 6:52:54 PMpubliccompleted
Loading additional data...

Summary

This website contacted 45 IPs in 4 countries across 8 domains to perform 33 HTTP transactions. The main domain is login.microsoftonline.com.

Submitted URL: http://roombooking.ifm/

Effective URL: https://login.microsoftonline.com/2782ef14-4849-46b4-b90d-d7e83fc425ca/oauth2/authorize?client_id=6a35dac2-6b43-4848-a757-82c6df0c427d&redirect_uri=https%3A%2F%2Fifm-roombooking.teoscloud.com%2FAccount%2FOidcResponse&resource=https%3A%2F%2Fgraph.microsoft.com&response_type=id_token&scope=openid%20email&state=OpenIdConnect.AuthenticationProperties%3DPuJzXWD5xVGdjDHCvZPsNdMFNMH4GNKXVOYijZupyeR-DW64gadEpHhZQmvyZPweSS18uqgwzF8UbhFXiDB8kOzrvHxeShwUgRWHmZDZKGqHPSmNAECNihvBVy8XlOGw8p1gzvAP-YuA9GzPxQL0KOYeHihnqiMsQe1JRjMPdLknNanPsAPCec62OurTqtd-znywslAqLccim-AFDxVKaNOWxXhSbcb7zmhkX3v6LqfQ4iuGNOLBulqSyKjSIuMS6mGfBZ5pk5ChuA-nYGRo6w&response_mode=form_post&nonce=639002119403414426.YWFjMzEzMGQtMTQxZS00MDYzLWE4OTUtNGJlNjNjOWFhYjUyYWZkMTZjMzYtOGI1Ny00ZjliLWFhMTEtOWU0NDYwNGY5OTU3&x-client-SKU=ID_NET472&x-client-ver=7.0.3.0&sso_reload=trueRedirected

AI Security Verdict

Moderate Risk

Confidence: 75%

5
Risk Score

The site hosts a Microsoft SSO login form but lacks reputation; treat as moderate risk.

Risk Factors
Unranked domain with unknown creation date
Presence of credential collection form on an unknown site
Potential brand mismatch (room‑booking service on a non‑official domain)
Safety Factors
Form posts to official Microsoft login endpoint
No credential exfiltration observed
No malicious JavaScript or IDS alerts
Hidden fields appear to be standard SSO tokens
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

The domain name 'roombooking.ifm' uses the .ifm top-level domain. The registrable portion 'roombooking' spans 11 characters containing five vowels alongside six consonants. Breaking it apart gives two words: room, booking. Median word length is 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://roombooking.ifm/

Page Load Overview

0.65s
Total Load Time
33
HTTP Requests
8
Domains
480 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:109 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3323.207.210.137Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1923.207.210.132Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
413.107.246.44United States
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
440.126.31.67Dublin, Leinster, Ireland
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
140.126.31.3Dublin, Leinster, Ireland
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
152.178.17.233Amsterdam, North Holland, Netherlands
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
120.190.160.5Amsterdam, North Holland, Netherlands
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
1160.20.154.50Netherlands
AS50673Serverius Holding B.V.
1195.253.6.126Germany
AS8391Knipp Medien und Kommunikation GmbH
040.126.31.131Dublin, Leinster, Ireland
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
3345--

Detected Technologies4

X-UA-Compatible
100%
PasswordField
100%
Meta-Refresh-Redirect
100%
Ghost
15%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data