ScanMalware.com

Security Scan Report: onedrive.cloud.microsoft

Redirected to:
https://login.microsoftonline.com/common/oauth2/authorize?client%5Fid=...
Site favicon
Submitted: Jul 15, 2026, 5:17:03 AMCompleted: Jul 15, 2026, 5:18:16 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 3 countries across 4 domains to perform 2 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://onedrive.cloud.microsoft/

Effective URL: https://login.microsoftonline.com/common/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&ear%5Fjwe%5Fcrypto=eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTI1NkdDTSIsImFwdiI6IkFBQUFDVVZoY2tOc2FXVnVkR2dBQUFCRlEwc3pNQUFBQUxxOFBCWDhtWi9MVml3ckN4OEt3S1Y3UnQ0aVNxWWczSHZ3NTIzeGhON25XL2h2bmx4UUNjdzU3UnluLzhkZHBFZjJGb2ZoWGZYU2NXZmZqS2thTU1wMk5NcUE2TTZsQVFZTlZiS0JSSWF1dk5saTBpK3IzZ3BHVVRnVDFWNWluUUFBQUJqZHVJcmdGY1BlTGZQMjMzS0Z2THRUR1p3K1FwbW41ZFk9In0%3D&ear%5Fjwk=eyJhbGciOiJFQ0RILUVTIiwiY3J2IjoiUC0zODQiLCJ4IjoiQUFBQU1McThQQlg4bVovTFZpd3JDeDhLd0tWN1J0NGlTcVlnM0h2dzUyM3hoTjduVy9odm5seFFDY3c1N1J5bi84ZGRwQT09IiwieSI6IkFBQUFNRWYyRm9maFhmWFNjV2ZmaktrYU1NcDJOTXFBNk02bEFRWU5WYktCUklhdXZObGkwaStyM2dwR1VUZ1QxVjVpblE9PSIsImt0eSI6IkVDIn0%3D&spa%5Fclient%5Fid=08e18876%2D6177%2D487e%2Db8b5%2Dcf950c1e598c&client%5Finfo=1&response%5Ftype=code%20id%5Ftoken%20spa%5Frt&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=A09925F76BFA33FE25EE360CC6080916B08935628A4DF2F3%2DE996169023CF9157DFDB4F23E9DC1E426EECC1E0686BDC0AC0DCEFFE914C3C25&redirect%5Furi=https%3A%2F%2Fonedrive%2Ecloud%2Emicrosoft%2F%5Fforms%2Fdefault%2Easpx&state=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&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=1e6627a2%2D8059%2Df000%2D4dca%2Df679bad4aa4d&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #70 of the top 1 million websitesTop 100 Site

AI Security Verdict

Safe Website

Confidence: 94%

2
Risk Score

The site is a legitimate Microsoft login page with no malicious indicators.

Safety Factors
High domain reputation and long registration history
TLS/HTTPS connection
Official Microsoft branding and domain
Legitimate SSO redirect
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(85%)

Domain Information

The domain 'onedrive.cloud.microsoft' uses the .microsoft top-level domain with subdomain 'onedrive'. The second-level label 'cloud' is 5 characters long split between 2 vowels and three consonants. Breaking it apart gives 1 word: cloud. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://onedrive.cloud.microsoft/

Page Load Overview

0.93s
Total Load Time
18
HTTP Requests
4
Domains
474 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:133 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software85% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
85%
social media network
40%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
613.107.246.44Azure · CLOUDUnited States
AS8075Microsoft Corporation
420.190.159.129Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
440.126.32.138Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
413.107.138.10Azure · CLOUDRedmond, Washington, United States
AS8075Microsoft Corporation
184--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T175A38DD67FA31D37878A44B9B5BA3E026B766E134848CD64B59CC9843FEA70E8023517

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:FwOCO68GLG2EOJOQuTrOaCH1NEoQIZ9Tjuokmap5vPoMLufq+0fiiiJORC:qOCO68VOJOQuTrOaCfE0a/AwWJORC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:102591:GJsSErsNzACGIWWhkCESCCgOAAnDP5CnhwzhcExRQBYQAeUhAZTggF6UgOQT4LT6MFiIQpAYgTAWJTQ1eZtADCPKQgBBhFJR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0010393b373f3737
Perceptual Hash:845971764699d96e
Difference Hash:88e4d2d3e5e6e6e6
Wavelet Hash:00003b3b373f373f
Color Hash:#c587a5

Other Hashes

Crop Resistant:88e4d2d3e5e6e6e6

Scan History

Scan history not available

Unable to load historical scan data