When you land on azurebeaconhillsg-my.sharepoint.com, you're immediately pushed to a Microsoft login screen. That alone isn't proof of a scam — many legitimate SharePoint sites do this — but it's the kind of behavior scammers copy to trick people into entering credentials. The domain hides its ownership records, blocks search engines from crawling its content, and has no web history to establish trust. A real business or team sharing files through Microsoft's platform would typically have a clearer trail: visible branding, a known domain age, and at least some presence in search results. Here, none of that exists. If someone sent you this link asking you to log in, pause and verify directly with the organization they claim to represent. Don't rely on the link itself to be legit, because nothing about this setup confirms that it belongs to who you think it does.
No — azurebeaconhillsg-my.sharepoint.com doesn't look safe
In plain English
This site is most likely a legitimate Microsoft SharePoint domain used for internal document access, but the way it presents itself raises real concerns. The homepage immediately redirects to a login screen, hides its ownership, and blocks search engines — all of which make it look like a phishing setup. Without more evidence of who runs it, you should treat this link with serious caution.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
Strong security setup: a valid SSL certificate from Microsoft, enforced HTTPS, and clickjacking protection are all in place. This is exactly what you'd expect from a Microsoft-hosted service.
The domain registration is hidden through a privacy service, and WHOIS returns no owner details. For a site tied to a company's internal SharePoint, this is a significant gap — you can't verify who actually operates it.
No blacklist hits and no threats flagged by Google, which is good. But the site has no presence in the Wayback Machine and isn't ranked among the top million sites, so it's either very new or rarely visited.
The site redirects immediately to a Microsoft login page and blocks all search crawlers via its robots.txt. There's no visible branding, favicon, or contact information — the domain itself offers zero transparency about who's behind it.
No privacy policy, terms of service, or cookie consent are presented on the homepage. For a site that asks for login credentials, legal disclosures should be standard — their absence is a compliance red flag.
The domain is hosted on Microsoft's own network and resolves to their IPs, which is technically sound. DNSSEC isn't enabled and email setup is absent, but for a SharePoint redirect domain that's not unusual.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.
