Security Scan: Sign in to your account

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c61e0ed3-0bba-405d-b08d-a65e7072af37 Domain and IP registration (RDAP)/api/v1/rdap/c61e0ed3-0bba-405d-b08d-a65e7072af37 Certificate Transparency/api/v1/ct/login.microsoftonline.com How often this domain was scanned/api/v1/domain/stats/creditsafe.167.235.134.13.sslip.io Scan history for this domain/api/v1/domain/history/creditsafe.167.235.134.13.sslip.io?limit=15

This website contacted 9 IPs in 2 countries across 6 domains to perform 18 HTTP transactions. The main domain is login.microsoftonline.com and was registered 31 years ago.

Submitted URL: http://creditsafe.167.235.134.13.sslip.io/

Effective URL:

https://login.microsoftonline.com/eec3c7b7-a8b0-43c7-be4b-b44925652963...

Redirected

The Cisco Umbrella rank of the primary domain is #479,547 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 55%

Risk Score

Redirects to a genuine Microsoft sign-in via OAuth, so no credential theft occurs. However, the flow is launched from a dynamic-DNS IP host named 'creditsafe', which is atypical and warrants caution before granting consent.

Risk Factors

OAuth authorization request originates from a dynamic-DNS (sslip.io) subdomain bound to a raw IP address rather than a normal hosted domain

Third-party OAuth application redirecting credentials/session authorization to a self-hosted callback on an IP-based domain

Name 'creditsafe' used on a non-Creditsafe domain raises brand-misuse concerns

Safety Factors

Final landing page is the genuine login.microsoftonline.com domain, not a lookalike

SSO flow judged legitimate; no credential exfiltration or cross-origin JS data sinks

No Indicators of Compromise, no YARA malware patterns, no kit-roster match, no Safe Browsing threat

OAuth scopes requested are minimal (openid, email, profile)

Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 5 to 2

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: -2057558656

MD5: 12e3dac858061d088023b2bd48e2fa96

Domain Name Analysis

Within the British Indian Ocean Territory country-code top-level domain (.io), 'creditsafe.167.235.134.13.sslip.io' is registered, featuring subdomain 'creditsafe.167.235.134.13'. Count 5 characters in 'sslip' containing 1 vowel alongside four consonants. Word splitting yields two words: s, slip. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.98s

Total Load Time

472 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:109 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software79% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

79%

social media network

28%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	40.126.32.138Office365 · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
2	167.235.134.13	Nuremberg, Bavaria, Germany	AS24940Hetzner Online GmbH
2	23.207.210.132Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	20.190.160.14Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
2	40.126.32.136Office365 · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
2	23.207.210.136Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	20.190.160.67Office365 · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
2	40.126.32.134Office365 · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
2	52.178.17.234Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
18	9	-	-