ScanMalware.com

Security Scan Report: preferred.sharepoint.com

Redirected to:
https://login.microsoftonline.com/eb9ba975-8d29-47eb-8b15-ccc8ddc59a1b...
Site favicon
Submitted: Jul 2, 2026, 5:17:02 AMCompleted: Jul 2, 2026, 5:18:53 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 2 countries across 4 domains to perform 2 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://preferred.sharepoint.com

Effective URL: https://login.microsoftonline.com/eb9ba975-8d29-47eb-8b15-ccc8ddc59a1b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&ear%5Fjwe%5Fcrypto=eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTI1NkdDTSIsImFwdiI6IkFBQUFDVVZoY2tOc2FXVnVkR2dBQUFCRlEwc3pNQUFBQUk3cHVNZlBYQVJyeHRSb3ZmZEpLNVh2dDdiZUFxbnczQnZMZUJXQjhmTENmMDlwZkFubUtadkwxdVI3cUpyN0JQT2xKNithQkdmdzdXbmR2MTlyeXJPaUUxUDN2anVRNTdheno5dDRVc1d5eVZ6cTVobG12KzV2ZlExMy9jc3pHQUFBQUJqSGJGT2RsUkVzZFAyNHV5Mk13VkR4VXFMTGl1UjdkQm89In0%3D&ear%5Fjwk=eyJhbGciOiJFQ0RILUVTIiwiY3J2IjoiUC0zODQiLCJ4IjoiQUFBQU1JN3B1TWZQWEFScnh0Um92ZmRKSzVYdnQ3YmVBcW53M0J2TGVCV0I4ZkxDZjA5cGZBbm1LWnZMMXVSN3FKcjdCQT09IiwieSI6IkFBQUFNUE9sSjYrYUJHZnc3V25kdjE5cnlyT2lFMVAzdmp1UTU3YXp6OXQ0VXNXeXlWenE1aGxtdis1dmZRMTMvY3N6R0E9PSIsImt0eSI6IkVDIn0%3D&spa%5Fclient%5Fid=08e18876%2D6177%2D487e%2Db8b5%2Dcf950c1e598c&client%5Finfo=1&response%5Ftype=code%20id%5Ftoken%20spa%5Frt&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=6A871588989FEC5C92EC42106B7E70FA67B52E12B28C33A5%2D88CCBFDF883521FC9B433C93515FAFB383512B782937A25355823F0A5DF5E18A&redirect%5Furi=https%3A%2F%2Fpreferred%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=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&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=f33623a2%2D005b%2D6000%2D125f%2Dff3d3e4fd933&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #66 of the top 1 million websitesTop 100 Site

AI Security Verdict

Low Risk

Confidence: 92%

2
Risk Score

Legitimate Microsoft login page; no evidence of phishing, credential theft, or malware.

Risk Factors
High JavaScript obfuscation score (CRITICAL) but no malicious YARA match or exfiltration
Safety Factors
Domain age >10 years and well‑established
Cisco Umbrella ranking in top 100
Legitimate cross‑origin SSO flow detected
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

You're looking at domain 'preferred.sharepoint.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'preferred'. Count 10 characters in 'sharepoint' containing four vowels alongside six consonants. Breaking it apart gives two words: share, point. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://preferred.sharepoint.com

Page Load Overview

2.10s
Total Load Time
32
HTTP Requests
6
Domains
511 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:109 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
840.126.31.128Office365 · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
813.107.246.44Azure · CLOUDUnited States
AS8075Microsoft Corporation
813.107.136.10Office365 · CLOUDRedmond, Washington, United States
AS8075Microsoft Corporation
840.126.31.71Office365 · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
324--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18AA36CDA3F77193B828944B8B5B53E065A766D0B884C8CA4F55CDD882FFB60D812B613

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:D88GLG20b7boYsOq30bbpbgAtubHy0b+jHwhPqo8IZ9Tjuokmap5vPoMLuBh0XB2:g8rvkYsOq30npwby0SjMPqEa/A2XFC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:98233:o3ooIFUxSoYIpQHGROBAgJa0ELoE4BPkoQALNKDcwQoCQ1GGumEJBQAIGQWMFiXvk0CmcgMBUkR0cFCIYBQ8IViShIUAASAp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0010393b373f3737
Perceptual Hash:845971764699d96e
Difference Hash:88e4d2d3e5eee6e6
Wavelet Hash:00003b3b373f373f
Color Hash:#b240bf

Other Hashes

Crop Resistant:88e4d2d3e5eee6e6

Scan History

Scan history not available

Unable to load historical scan data