The domain name 'login.microsoftonline.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'login'. Count 15 characters in 'microsoftonline' split between 6 vowels and nine consonants. Segmentation suggests 2 words: microsoft, online. Average segment length settles at 7.5 characters. No strong language cues emerged from the frequency lists.

object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-GMXX6dP83aEZxCwVHr5zXg' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All

object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-tAiRgERZmIC1RLAkL1htgA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All

object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-Wk9TwzsskySA9vjI0YXJ3g' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All

object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-XAhoRzHksrgFk_8Uwer9DA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

✅ Low Risk - https://login.microsoftonline.com/fdde2c89-3838-45a3-b272-6cf08978701f/oauth2/v2.0/authorize?response_type=code&client_id=2f65f154-d2de-4bf3-8260-9668c2a77af1&scope=openid%20profile%20User.Read&state=_Uxa8hCZXBTR5YwpNF-rvn1BCSP07GxTVcvE8ecueLk%3D&redirect_uri=https://review-test.miamidade.gov/login/oauth2/code/microsoft&nonce=qHzWT79cbe-k3Q27NqXkLXna7-_Fe3mDV9ykKYSDwy8

Requests	IP Address	Location	AS Autonomous System
2	20.190.160.14	Amsterdam, North Holland, Netherlands	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
1	20.190.160.3	Amsterdam, North Holland, Netherlands	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
1	2.16.106.138	Amsterdam, North Holland, Netherlands	AS20940Akamai International B.V.
1	40.126.32.76	Amsterdam, North Holland, Netherlands	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
5	4	-	-

Security Scan Report: login.microsoftonline.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Domain & IP Information

Page Statistics

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History