Security Scan Report: enterpriseenrollment.hom.c6bank.com.br

Redirected to:
https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 4 countries across 9 domains to perform 23 HTTP transactions. The main domain is c6bank.com.br and was registered 8 years ago.

Submitted URL: https://enterpriseenrollment.hom.c6bank.com.br

Effective URL:
https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?...
Redirected

AI Security Verdict

Safe Website

Confidence: 92%

1
Risk Score

Legitimate redirect from a bank's enterprise-enrollment subdomain into Microsoft's real Azure/Entra ID sign-in on login.microsoftonline.com. No phishing, IoC, YARA, or credential exfiltration evidence.

Safety Factors (5)
Final URL is the authentic login.microsoftonline.com Microsoft Azure AD/Entra ID authorization endpoint with valid registered client_id and PKCE challenge.
Login form posts same-flow to login.microsoftonline.com/common/login — no cross-domain credential capture.
Password field (1) is part of Microsoft's own standard sign-in form with expected hidden anti-CSRF/flowToken fields.
No threat-intelligence matches, no network IDS alerts, no JavaScript malware detection, no known phishing kit.
Apparent brand-impersonation flag traced to a standard 'Sign in with GitHub' federated sign-in option.
Domain age information unavailable

Details

Page Title

Sign in to Microsoft Azure

Scan Type

public

Domain Name Analysis

Within the Brazilian country-code top-level domain (.com.br), 'enterpriseenrollment.hom.c6bank.com.br' is registered, featuring subdomain 'enterpriseenrollment.hom'. Count 6 characters in 'c6bank' holding one vowel versus 4 consonants, plus one digit. It segments into three words: c, 6, bank. Average segment length settles at one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://enterpriseenrollment.hom.c6bank.com.br

Page Load Overview

1.65s
Total Load Time
827 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:187 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
77%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1220.190.160.4Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
113.74.111.192Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
1150.171.84.25Azure · CLOUDUnited States
AS8075Microsoft Corporation
152.168.117.168Azure · CLOUDDulles, Virginia, United States
AS8075Microsoft Corporation
120.190.160.14Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
123.207.210.132Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
120.50.201.205Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
120.190.160.17Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
1104.208.16.94Azure · CLOUDDes Moines, Iowa, United States
AS8075Microsoft Corporation
140.126.32.74Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
2312--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T141935BE9BFA32937868A55B1B4B52E026E3A6D03984DCD60F14CCDC82FFB65C8127553

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:e568GLG2gF5txbWMUTIZ9Tjuokmap5vPoMLuBo0fyiDse1:S68v5txbrU2a/Ahse1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:93170:/miIk1Qi+g0IHoUSTiUoiGDCoNVAJANgAASHYAWU5zBwCQJSXFoA4CEaAAEXNEuSAgCGIBATdPTBECchTPxRNzgKBtBLEFAh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003a3f3f373fff00
Perceptual Hash:85d970f626d919e4
Difference Hash:c8e2d2d2e4cae6e7
Wavelet Hash:003a3b3f373f7700
Color Hash:#783a71

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data