Scan report · about 2 months agoPublic

microsoft.sharepoint.com

13.107.138.10AS8075 · US

Submittedhttps://microsoft.sharepoint.com/

Landed onhttps://login.microsoftonline.com/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&ear%5Fjwe%5Fcrypto=eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTI1NkdDTSIsImFwdiI6IkFBQUFDVVZoY2tOc2FXVnVkR2dBQUFCRlEwc3pNQUFBQUZicUxXaTNOUVhkQXd5QXF2YmdqNEdpRTZnWitObWxKdVhYTzNWUThzRFlGbFBRYXhjUyt6QmNSNWg5M3lPZkE4NUd5L1NTVURxUmNzUTl1N2FkaEVHU0F2UUhIK3hOMDBXWnRqQ0gwU3hHbm1MRWVTbm90dm1XcEp2VHhxQWh4Z0FBQUJqdnN5eDNmUi9JZzBWTXFHZnJrRkw3R2EwMXdhMVlqWTA9In0%3D&ear%5Fjwk=eyJhbGciOiJFQ0RILUVTIiwiY3J2IjoiUC0zODQiLCJ4IjoiQUFBQU1GYnFMV2kzTlFYZEF3eUFxdmJnajRHaUU2Z1orTm1sSnVYWE8zVlE4c0RZRmxQUWF4Y1MrekJjUjVoOTN5T2ZBdz09IiwieSI6IkFBQUFNTTVHeS9TU1VEcVJjc1E5dTdhZGhFR1NBdlFISCt4TjAwV1p0akNIMFN4R25tTEVlU25vdHZtV3BKdlR4cUFoeGc9PSIsImt0eSI6IkVDIn0%3D&spa%5Fclient%5Fid=08e18876%2D6177%2D487e%2Db8b5%2Dcf950c1e598c&client%5Finfo=1&response%5Ftype=code%20id%5Ftoken%20spa%5Frt&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=379B949530685E57F744BFAFCD984ABC6C2F8DB5DDD8065B%2DCEFD46E37C59B4E9D4B9D4137C93A2EEEA44F3CD8010367A2CD9723D3D938501&redirect%5Furi=https%3A%2F%2Fmicrosoft%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=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&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=d27032a2%2Dd068%2D1000%2Db582%2Ded07a6a76c08&sso_reload=true· 5 redirects

Verdict

0 of 7 enginesCleanAutomated

Own this site?

Looks safe

Automated

It asks you to enter a password. Our automated checks did not find known threat signals on this site at the time of the scan.

What to do

No action needed. Stay alert as usual — a clean result reflects this scan only, and sites can change after they are checked.

A clean result means no known threat signals were found in this scan — it is not an absolute guarantee, and a site can change after it is checked.

Findings

Strongest first

InfoCross-domain scripts injected at runtime

3 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP: 13.107.138.10MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation, US · AS8075US
TLS: CN=Microsoft TLS G2 RSA CA OCSP 16, O=Microsoft Corporation, C=US · expires Jan 18, 2027
Redirects: 5 hops · / → /72f988bf-86f1-41af-91ab-2d7…d07a6a76c08&sso_reload=true

WHOIS

Registrar: Nom-iq Ltd. dba COM LAUDE
Created: Aug 10, 1998
Expires: Aug 9, 2027
Nameservers: ns1-221.azure-dns.comns2-221.azure-dns.netns3-221.azure-dns.orgns4-221.azure-dns.info

2 malicious5 suspicious

Hashes & fingerprints

Page Hash2532cfb505458b6e4c5cd54b82bb06ab46678bd21976b5c6a93a613f4ebf15d2 Favicon Hash90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21 DOM Hashc827da212a4f3911e75b7c854533b4902b66bd2cd3cbb4d5b4dba6ff5f8d2aac Screenshot pHashd519b3e6c4996466 JARM2ad2ad16d00000000042d42d00042dcb57b200e0cb3383404b56c5da15abb3 JA4Xa373a9f83c6b_2bab15409345_0f2217ba412e Cert ThumbprintFA54FC7EDE2CB374F4968E36A73D9541D019135F Cert IssuerCN=Microsoft TLS G2 RSA CA OCSP 16, O=Microsoft Corporation, C=US

Page capture

Live

Title “Sign in to your account”

Visit Site

Engines

7 · time to verdict