Scan report · about 2 months agoPublic

outlook.office.com

40.98.16.98AS8075 · US

Submittedhttps://outlook.office.com/

Landed onhttps://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=9199bf20-a13f-4107-85dc-02114787ef48&scope=https%3A%2F%2Foutlook.office.com%2F.default%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Foutlook.office.com%2Fmail%2F&client-request-id=29b156ff-59de-47e4-8cb7-49eeeed3b112&response_mode=fragment&client_info=1&clidata=1&prompt=select_account&nonce=019ff1e5-5d59-7bb8-96f8-a232c66cf44d&state=eyJpZCI6IjAxOWZmMWU1LTVkNTktN2ZjOS1iZGZjLThhYzI5YzQ0YmNhZiIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D%7CaHR0cHM6Ly9vdXRsb29rLm9mZmljZS5jb20vbWFpbC8&claims=%7B%22access_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&x-client-SKU=msal.js.browser&x-client-VER=5.12.0&response_type=code&code_challenge=okbZVR64kvM3ArUxvtdbmDVp47tvAHhjUqkL1fSwGPI&code_challenge_method=S256· 3 redirects

Verdict

0 of 7 enginesCleanAutomated

Own this site?

Looks safe

Automated

It asks you to enter a password. Our automated checks did not find known threat signals on this site at the time of the scan.

What to do

No action needed. Stay alert as usual — a clean result reflects this scan only, and sites can change after they are checked.

A clean result means no known threat signals were found in this scan — it is not an absolute guarantee, and a site can change after it is checked.

Findings

Strongest first

InfoCross-domain scripts injected at runtime

3 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP: 40.98.16.98MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation, US · AS8075US
TLS: CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US · expires Jan 10, 2027
Redirects: 3 hops · / → /common/oauth2/v2.0/authoriz…&code_challenge_method=S256

WHOIS

Registrar: MarkMonitor Inc.
Created: Apr 20, 1999
Expires: Apr 20, 2027
Nameservers: ns1-05.azure-dns.comns2-05.azure-dns.netns3-05.azure-dns.orgns4-05.azure-dns.info

1 malicious15 suspicious

Hashes & fingerprints

Page Hash6f1f4f5b89a84b6815b848073705ca0d29ba0b494dd578405263ccfb4bd5b60d Favicon Hash90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21 DOM Hasha82dee7201a1b0a889d608fa4338b3f6cc0f57352415793002416918cea045bd Screenshot pHash847b396647991e66 JARM2ad2ad00000000000042d42d00042d4146ea1f84668e7542d0842f4af09255 JA4Xa373a9f83c6b_2bab15409345_2cdf432ec278 Cert ThumbprintC7C19E04464D744D810EF31A24C54FC22A7909C5 Cert IssuerCN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

Page capture

Live

Title “Sign in to your account”

Visit Site

Engines

7 · time to verdict