Security Scan: Sign in to Microsoft Azure

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f86ac772-d8ba-45ec-831b-f3df58583c47 Domain and IP registration (RDAP)/api/v1/rdap/f86ac772-d8ba-45ec-831b-f3df58583c47How often this domain was scanned/api/v1/domain/stats/enterpriseenrollment.zoochic-eu.ru Scan history for this domain/api/v1/domain/history/enterpriseenrollment.zoochic-eu.ru?limit=15

This website contacted 15 IPs in 4 countries across 9 domains to perform 23 HTTP transactions. The main domain is zoochic-eu.ru and was registered 15 years ago.

Submitted URL: https://enterpriseenrollment.zoochic-eu.ru

Effective URL:

https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?...

Redirected

AI Security Verdict

Low Risk

Confidence: 62%

Risk Score

Destination is the genuine Microsoft Azure sign-in (form posts to login.microsoftonline.com, no exfiltration, no threat-intel hits), but it is reached via an unrelated, unranked Russian-domain subdomain styled as an Intune enrollment host — treat such links with caution.

Risk Factors (2)

Deceptive-looking entry hostname ('enterpriseenrollment' under a random unrelated domain) used purely as a redirector to a Microsoft login page — a pattern frequently used as a phish lure/filter bypass.

Entry domain zoochic-eu.ru is unranked and unrelated to Microsoft, so the link a victim clicks does not visibly point at Microsoft.

Safety Factors (5)

Final destination is the real Microsoft identity platform (login.microsoftonline.com) with a redirect_uri to intune.microsoft.com and the standard Azure Portal client ID.

The credential form submits same-brand to Microsoft's own login endpoint; no cross-origin exfiltration was detected.

No Indicators of Compromise, no malware YARA hits, no IDS alerts, no phishing-kit roster match.

Only JavaScript host besides Microsoft properties is browser telemetry (events.data.microsoft.com), consistent with genuine Microsoft pages.

Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 4 to 2

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: -2057558656

MD5: 12e3dac858061d088023b2bd48e2fa96

Domain Name Analysis

The domain name 'enterpriseenrollment.zoochic-eu.ru' uses the Russian country-code top-level domain (.ru) with subdomain 'enterpriseenrollment'. Count 10 characters in 'zoochic-eu' split between 5 vowels and four consonants, along with 1 hyphen. It segments into three words: zoo, chic, eu. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.51s

Total Load Time

833 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:187 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

77%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	40.126.31.67Office365 · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
1	13.74.111.192Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
1	150.171.84.25Azure · CLOUD	United States	AS8075Microsoft Corporation
1	51.116.246.107Azure · CLOUD	Frankfurt am Main, Hesse, Germany	AS8075Microsoft Corporation
1	20.190.160.20Office365 · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
1	23.207.210.132Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	4.207.44.77Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
1	52.236.189.96Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
1	20.190.160.17Office365 · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
1	13.89.179.12Azure · CLOUD	Des Moines, Iowa, United States	AS8075Microsoft Corporation
23	15	-	-