ScanMalware.com

Security Scan Report: giraffe.aptivsweden.se

Redirected to:
https://login.microsoftonline.com/6b1311e5-123f-49db-acdf-8847c2d00bed...
Site favicon
Submitted: Jul 30, 2026, 1:19:51 PMCompleted: Jul 30, 2026, 1:21:02 PMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 5 countries across 5 domains to perform 2 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: http://giraffe.aptivsweden.se/

Effective URL: https://login.microsoftonline.com/6b1311e5-123f-49db-acdf-8847c2d00bed/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&ear%5Fjwe%5Fcrypto=eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTI1NkdDTSIsImFwdiI6IkFBQUFDVVZoY2tOc2FXVnVkR2dBQUFCRlEwc3pNQUFBQUZRRS8vblAzNElmL0NTMHhnRHozZWlQZ1k1OFpVN0YzS0E0WTZ1bTBqZGtsUHBqYy9ucDRNTldDQU16YTJaeTVVMnQ3b1Bad1dqZEN4TEV0T0hOa2hyZnRja0dVZ0tZMDNEZ1dONldVZ1d0V2JrbzFhTUxEd2hjQm5RZEdTd3VPZ0FBQUJoTGdKa2g5UlIvOEJWS3hqM3QrOTJoN2dRYllDQXI3dVk9In0%3D&ear%5Fjwk=eyJhbGciOiJFQ0RILUVTIiwiY3J2IjoiUC0zODQiLCJ4IjoiQUFBQU1GUUUvL25QMzRJZi9DUzB4Z0R6M2VpUGdZNThaVTdGM0tBNFk2dW0wamRrbFBwamMvbnA0TU5XQ0FNemEyWnk1UT09IiwieSI6IkFBQUFNRTJ0N29QWndXamRDeExFdE9ITmtocmZ0Y2tHVWdLWTAzRGdXTjZXVWdXdFdia28xYU1MRHdoY0JuUWRHU3d1T2c9PSIsImt0eSI6IkVDIn0%3D&spa%5Fclient%5Fid=08e18876%2D6177%2D487e%2Db8b5%2Dcf950c1e598c&client%5Finfo=1&response%5Ftype=code%20id%5Ftoken%20spa%5Frt&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=C199619424D5C3FF0363611C29D76AE8849FE30034878F66%2D18B37E62EF26BF2A84B5233DD11DD465E3575B6EDFA4D6F756623CA9DB615C87&redirect%5Furi=https%3A%2F%2Fspo%2Eaptiv%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=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&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=b4552ca2%2Dc0f6%2D8000%2D714b%2D1d97f7c67328&sso_reload=trueRedirected

AI Security Verdict

Low Risk

Confidence: 92%

3
Risk Score

Page impersonates APTIV and harvests credentials via a login form; treat as high‑risk phishing.

Risk Factors
Brand impersonation of APTIV
Credential harvesting form
Cross‑origin redirect to Microsoft login
Unranked/low‑reputation domain
Safety Factors
Top-ranked domain (Cisco Umbrella #0, 8786 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 8 to 3
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

education learning

(85%)

Domain Information

The domain 'giraffe.aptivsweden.se' uses the Swedish country-code top-level domain (.se) and includes subdomain 'giraffe'. The registrable portion 'aptivsweden' spans 11 characters holding four vowels versus 7 consonants. Tokenizing the label suggests 3 words: apt, iv, sweden. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://giraffe.aptivsweden.se/

Page Load Overview

2.31s
Total Load Time
20
HTTP Requests
6
Domains
1023 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:169 chars
Detector Agreement:67%

Website Classification

Primary Category

education learning85% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

education learning
85%
social media network
64%
technology software
58%
e-commerce shopping
44%
government public service
32%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
413.107.139.10Office365 · CLOUDRedmond, Washington, United States
AS8075Microsoft Corporation
4194.9.94.85Sweden
AS39570Loopia AB
440.126.32.138Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
440.126.31.71Office365 · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
423.207.210.132Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
205--

Page Statistics

20
Requests
6
Unique Domains
1.0 MB
Total Size

Detected Technologies4

X-UA-Compatible
100%
PasswordField
100%
Meta-Refresh-Redirect
100%
Ghost
15%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ADA38D967EF7193BC78654B5B5793E02AA3729034D8CDCA0F14CC9882FFAA488177647

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:DXrYrP8GLG26ZHr4GrKzRv9RHqyoKVIZ9Tjuokmap5vPoMLuBne0sd9i8ghC:rUr8R8GsKyxUa/AzhC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:98539:IjAJLAMCQYAtRnEEMUAaYKiIAByGIGBYIBA6yo3uFgIUlfcDJgBChTUmUCARALAW9JhCUoxDMkRgEVsGBYAAGKjgAGaAFIhR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:dd8923768c05d99d
Difference Hash:4cb0b2b232324c93
Wavelet Hash:0000fcfffefef000
Color Hash:#6ce089

Other Hashes

Crop Resistant:b83861bcb181afe1,0010403034600000,4cb0b2b232324c93

Scan History

Scan history not available

Unable to load historical scan data