Security Scan: Sign in to Microsoft Azure

Summary

This website contacted 2 IPs in 2 countries across 2 domains to perform 2 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://enterpriseenrollment.gva.be

Effective URL: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=c44b4083-3bb0-49c1-b47d-974e53cbdf3c&scope=https%3A%2F%2Fmanagement.core.windows.net%2F%2F.default%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fintune.microsoft.com%2Fauth%2Flogin%2F&client-request-id=019f39e2-1412-7503-8c4d-57aa83074687&response_mode=fragment&client_info=1&clidata=1&nonce=019f39e2-1412-7d3e-9c44-41a1d7058265&state=eyJpZCI6IjAxOWYzOWUyLTE0MTItNzBlYS05MGIxLTE3Zjg3YzNkNDFkMyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&x-client-SKU=msal.js.browser&x-client-VER=5.13.0&response_type=code&code_challenge=go4qDGO-T7HVn1XUZ6rUyuLyM51ysrOVgkZ7jmos30s&code_challenge_method=S256&site_id=501430&instance_aware=true&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #174,005 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 78%

Risk Score

The site mimics a Microsoft Azure login, collects credentials on an unrelated, low‑ranked domain, indicating a credential phishing attempt.

Risk Factors

Brand impersonation of Microsoft

Credential collection on unrelated domain

Low domain ranking for a claimed brand

Obfuscated JavaScript (high obfuscation score)

Safety Factors

Domain age 30+ years (well‑established)

No malicious IoC or YARA matches

Cross‑origin submission goes to official Microsoft endpoint

Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 7 to 2

Domain age information unavailable

Details

Page Title

Microsoft Intune admin center

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Screenshot

Page Load Overview

1.33s

Total Load Time

HTTP Requests

Domains

570 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:en

Text Length:187 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

77%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	150.171.84.42Azure · CLOUD	United States	AS8075Microsoft Corporation
13	52.236.189.96Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
26	2	-	-