ScanMalware.com

Security Scan Report: grafana.datum-prd.unionprivilege.net

Redirected to: https://login.microsoftonline.com/7f869ca8-c62a-47eb-911b-dcdaafc9335f/oauth2/v2.0/authorize?client_id=296ee8f6-a4bb-4809-993a-47a7bd570bc5&prompt=select_account&redirect_uri=https%3A%2F%2Faccess.datum-prd.unionprivilege.net%2Foauth2%2Fcallback&response_type=code&scope=openid+profile+email+offline_access&state=MW42THZMTkhpZC9RbHJBdnozMXFpaXc5QWZxL2EveWpDWG8yS0tEdFJWQ2tsWlNNWi9RdHZrcU5Dbko5dkZuZ1hzaXNaOVE3RHhtSTFzN2dtTVcvMmc9PXwxNzcyMjg3MzQzfBfd0Cn6n19w_WveWx8vX5RIdOan0Ni1JRvMznrNFj_UAR8gvzBc6kH-mTr6fQA3HK0JoNhEXx7So1yqs_aSXIqDZxMU8HmbvoSlJ29WX8ieikOKAXwYLPE3tmsZMyovoPut8TvhmJ3Qd4p2y9BUPqgRwuV4xpMy2JEZFUrl8_VXOeqPgKz6tzlT5RUWhT4x4UngawfIGUynZiIifbed35B61zKhlogLXH0SSvXQRc8RMXdtcvS_hvpk9I7uridtNCVa6qIGxDdjYRDgDHugbJ-CbIODKIdULaIwMOST3d3XTiG-rNhUM75X1KIfZuUpiNiioPt1glpOmVYCgRgDnLyOBtzeYfy6DM5LwRQEc_fuZFxYmJ_CgRmUPTFZnZvB2zPq-RmjPqp0qk5-8mA8VwCrSoVyblXp1CzPYuRe5_ZugKWyXkFzBKOmQKOdMjMyIiThsJk-Lm9FbLOZ9Ie56VCs4eJwUQ%3D%3D&sso_reload=true

Site favicon
Submitted: Feb 28, 2026, 2:02:20 PMCompleted: Feb 28, 2026, 2:03:31 PMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 3 countries across 5 domains to perform 22 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://grafana.datum-prd.unionprivilege.net/

Effective URL: https://login.microsoftonline.com/7f869ca8-c62a-47eb-911b-dcdaafc9335f/oauth2/v2.0/authorize?client_id=296ee8f6-a4bb-4809-993a-47a7bd570bc5&prompt=select_account&redirect_uri=https%3A%2F%2Faccess.datum-prd.unionprivilege.net%2Foauth2%2Fcallback&response_type=code&scope=openid+profile+email+offline_access&state=MW42THZMTkhpZC9RbHJBdnozMXFpaXc5QWZxL2EveWpDWG8yS0tEdFJWQ2tsWlNNWi9RdHZrcU5Dbko5dkZuZ1hzaXNaOVE3RHhtSTFzN2dtTVcvMmc9PXwxNzcyMjg3MzQzfBfd0Cn6n19w_WveWx8vX5RIdOan0Ni1JRvMznrNFj_UAR8gvzBc6kH-mTr6fQA3HK0JoNhEXx7So1yqs_aSXIqDZxMU8HmbvoSlJ29WX8ieikOKAXwYLPE3tmsZMyovoPut8TvhmJ3Qd4p2y9BUPqgRwuV4xpMy2JEZFUrl8_VXOeqPgKz6tzlT5RUWhT4x4UngawfIGUynZiIifbed35B61zKhlogLXH0SSvXQRc8RMXdtcvS_hvpk9I7uridtNCVa6qIGxDdjYRDgDHugbJ-CbIODKIdULaIwMOST3d3XTiG-rNhUM75X1KIfZuUpiNiioPt1glpOmVYCgRgDnLyOBtzeYfy6DM5LwRQEc_fuZFxYmJ_CgRmUPTFZnZvB2zPq-RmjPqp0qk5-8mA8VwCrSoVyblXp1CzPYuRe5_ZugKWyXkFzBKOmQKOdMjMyIiThsJk-Lm9FbLOZ9Ie56VCs4eJwUQ%3D%3D&sso_reload=trueRedirected

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Phishing page mimicking Microsoft login; avoid providing credentials.

Risk Factors
Brand impersonation (Microsoft) on non‑official domain
Credential harvesting form (email + password) on untrusted domain
Cross‑origin form submission to Microsoft login endpoint
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

Domain 'grafana.datum-prd.unionprivilege.net' uses the network infrastructure generic top-level domain (.net) with subdomain 'grafana.datum-prd'. The core label 'unionprivilege' covers 14 characters containing seven vowels alongside seven consonants. Tokenizing the label suggests two words: union, privilege. Average segment length settles at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://grafana.datum-prd.unionprivilege.net/

Page Load Overview

1.58s
Total Load Time
18
HTTP Requests
6
Domains
467 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:109 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
634.70.129.114Council Bluffs, Iowa, United States
AS396982Google LLC
413.107.246.44United States
AS8075Microsoft Corporation
440.126.32.76Amsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
420.190.159.64GermanyUnknown
184--

Detected Technologies5

X-UA-Compatible
100%
PasswordField
100%
Meta-Refresh-Redirect
100%
Envoy
40%
Ghost
15%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FF837DDDBEA2293B838A45B4B5797E02AF761903994CCD64F15CCC842FEA70D813B617

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:lg8GLGGBhVKQDioIyEk77gx2xpTvPoMmCftE5iiZVPC:W8oTDiJ32RAHC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:87850:t5BJJATDJjmKFgJQUKABAoQWjhBEEA6IOAQCQSIEcgSEiYLEklC0ECKLgFCOCrDw0iloeJwVHm4hkkgIBk1yBR0EqKRAAKAK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0010393b373f373f
Perceptual Hash:845971764699d96e
Difference Hash:88e4d2d3e5eee6e6
Wavelet Hash:00003b3b373f373f
Color Hash:#79a1d2

Other Hashes

Crop Resistant:88e4d2d3e5eee6e6

Scan History

Scan history not available

Unable to load historical scan data