When you see a URL like firstfloridaorg-my.sharepoint.com, you're looking at a subdomain that belongs to Microsoft's enterprise cloud platform. This isn't a random website — it's the sign-in page for an organization's internal Sharepoint portal. The site redirects to the official Microsoft login service, uses strong encryption, and has no history of being blacklisted. That's exactly what a legitimate corporate site should look like. Many phishing attempts try to mimic Sharepoint login screens, but the crucial difference is the domain itself. Since this URL is a subdomain of sharepoint.com and the certificate is issued by Microsoft, it's a real part of the Microsoft 365 ecosystem. If you're an employee or authorized user of the First Florida organization, this is the correct way to access your company's files. As with any login page, double-check that you're on the exact URL before entering credentials — but in this case, all signals point to a safe, genuine service.
In plain English
This site is a Microsoft Sharepoint subdomain used for corporate authentication. It has strong security and a clean reputation. You can trust it as a legitimate part of Microsoft's cloud services.
Where the score comes from
This is a securely configured Microsoft-hosted site. The valid SSL certificate, enforced HTTPS, and protections against clickjacking are what you'd expect from any major platform.
The domain is a subdomain of sharepoint.com, which belongs to Microsoft. The lack of a separate WHOIS record for this subdomain is normal and not a concern, since Microsoft is a well-known, established company.
The site shows up on no blacklists and hasn't been flagged by Google. The absence of a Wayback Machine history is typical for internal corporate portals that are not meant to be publicly archived.
This is a login page for an internal system, so it doesn't display contact info or an about page. That's expected behavior for a corporate authentication portal hosted by Microsoft.
Privacy policies and terms of service are not normally shown on a sign-in screen for a private workplace portal. Microsoft's own compliance covers the underlying platform.
Solid DNS resolution to Microsoft's servers, HSTS enforced, and modern encryption. DNSSEC is not enabled, but for a subdomain relying on Microsoft's infrastructure that's a minor oversight rather than a red flag.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →