Security Scan Report: enterpriseenrollment.zara.cn

Redirected to:
https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 17 IPs in 6 countries across 8 domains to perform 23 HTTP transactions. The main domain is zara.cn and was registered 23 years ago.

Submitted URL: https://enterpriseenrollment.zara.cn

Effective URL:
https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?...
Redirected

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Entry host redirects to the genuine Microsoft login.microsoftonline.com sign-in page for Azure/Intune enrollment; credentials post to Microsoft's own domain with a valid OAuth flow, no malware or phishing indicators.

Safety Factors (5)
Final URL and form action are on the genuine login.microsoftonline.com domain
OAuth redirect_uri points to intune.microsoft.com, matching Microsoft's legitimate enrollment flow
Sign-in is performed against Microsoft's own servers; credentials are not sent to the entry domain
Nameservers/scripts and telemetry hosts are Microsoft-owned (msftauth.net, data.microsoft.com, login.live.com)
No obfuscated or malicious JavaScript, no YARA, threat-intel or IDS hits
Domain age information unavailable

Details

Page Title

Sign in to Microsoft Azure

Scan Type

public

Domain Name Analysis

The domain name 'enterpriseenrollment.zara.cn' uses the Chinese country-code top-level domain (.cn), featuring subdomain 'enterpriseenrollment'. The registrable portion 'zara' spans 4 characters with two vowels and two consonants. Tokenizing the label suggests 1 word: zara. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://enterpriseenrollment.zara.cn

Page Load Overview

1.90s
Total Load Time
837 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:187 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
77%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
720.190.160.17Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
152.236.189.96Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
1150.171.84.26Azure · CLOUDUnited States
AS8075Microsoft Corporation
152.168.117.168Azure · CLOUDDulles, Virginia, United States
AS8075Microsoft Corporation
120.190.159.2Office365 · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
195.101.24.23Akamai · CDNBuenos Aires, Buenos Aires F.D., Argentina
AS20940Akamai International B.V.
14.207.44.76Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
113.74.111.192Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
1150.171.84.25Azure · CLOUDUnited States
AS8075Microsoft Corporation
120.190.160.66Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
2317--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F0935BE6BEA72D3B878A45B1A5B52E02AE3A5E03484CCD74F05CDD842FFA65D8137503

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:+BBC8GLG2Ivk0sVmUv1vcv7Cn6oGIZ9Tjuokmap5vPoMLuBJ0foiDmgv61:H8yV6Oa/AWq1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:95586:IshRJIARsRl8hkE5PkAUKgBIQD1KHkQJIhJoRghqAg5GBuTIcgUAYEG4HGQIABIARUQIiAACBQAQIUgVI2A2+AyBYnyBKlaA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003a3f3f373fff00
Perceptual Hash:85d970f626d919e4
Difference Hash:c8e2d2d2e4cae6e7
Wavelet Hash:003a3b3f373f7700
Color Hash:#763a78

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data