Security Scan: Sign in to Microsoft Azure

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a9e2d273-1c9e-46a0-83ad-898a797c3420 Domain and IP registration (RDAP)/api/v1/rdap/a9e2d273-1c9e-46a0-83ad-898a797c3420How often this domain was scanned/api/v1/domain/stats/enterpriseenrollment.zoochic-eu.ru Scan history for this domain/api/v1/domain/history/enterpriseenrollment.zoochic-eu.ru?limit=15

This website contacted 12 IPs in 4 countries across 8 domains to perform 23 HTTP transactions. The main domain is zoochic-eu.ru and was registered 15 years ago.

Submitted URL: https://enterpriseenrollment.zoochic-eu.ru

Effective URL:

https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?...

Redirected

AI Security Verdict

Low Risk

Confidence: 60%

Risk Score

Redirect chain ends on Microsoft's genuine login.microsoftonline.com OAuth page; the credential form posts to Microsoft itself, with no exfiltration, IoC, YARA or IDS evidence. Only the unrelated entry domain is mildly unusual.

Risk Factors (2)

Capture started on an unrelated domain (enterpriseenrollment.zoochic-eu.ru) whose subdomain label mimics Microsoft Intune enrollment naming, then redirected to Microsoft's login

Entry domain is not ranked in the Cisco Umbrella top 1M (weak prior only)

Safety Factors (3)

Credential form posts to the official Microsoft login domain, verified as a legitimate SSO redirect rather than exfiltration

Page is served from Microsoft-owned domains (login.microsoftonline.com, aadcdn.msauth.net, login.live.com, portal.azure.com)

No credential exfiltration, no hidden password/card fields, no malware or YARA hits, no threat-intelligence matches

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: -2057558656

MD5: 12e3dac858061d088023b2bd48e2fa96

Domain Name Analysis

The domain name 'enterpriseenrollment.zoochic-eu.ru' uses the Russian country-code top-level domain (.ru) with subdomain 'enterpriseenrollment'. The registrable portion 'zoochic-eu' spans 10 characters holding 5 vowels versus four consonants, along with one hyphen. Breaking it apart gives 3 words: zoo, chic, eu. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.28s

Total Load Time

836 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:187 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

77%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	20.190.159.0Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
1	13.74.111.192Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
1	150.171.84.42Azure · CLOUD	United States	AS8075Microsoft Corporation
1	20.184.175.2Azure · CLOUD	San Jose, California, United States	AS8075Microsoft Corporation
1	40.126.31.129Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
1	13.107.246.44Azure · CLOUD	United States	AS8075Microsoft Corporation
1	40.79.141.158Azure · CLOUD	Paris, Île-de-France, France	AS8075Microsoft Corporation
1	40.126.31.69Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
1	23.207.210.132Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	20.190.159.75Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
23	12	-	-