Account Security Problems

How to Fix Malwarebytes Flagging res-1.cdn.office.net on OneDrive Login

WPS Editor Oct 1, 2026 868 views

Question details

The user encounters a malware warning from Malwarebytes Browser Guard regarding the domain res-1.cdn.office.net when attempting to access the OneDrive login page.

How to Fix Malwarebytes Flagging res-1.cdn.office.net on the OneDrive Login Page

Product: OneDrive / Malwarebytes Browser Guard
Device & OS: not provided
Scenario: Accessing the OneDrive login portal via a web browser equipped with the Malwarebytes Browser Guard extension.
Observed behavior: Malwarebytes blocks the page or triggers a malware alert for res-1.cdn.office.net, despite other security tools not detecting any threat.

Before you start

Before proceeding, inspect your browser's address bar to ensure the URL displays an official Microsoft domain (such as login.microsoftonline.com or onedrive.live.com) to rule out an actual phishing attempt.

Solution 1Recommended

Verify the Domain and Bypass the False Positive

Confirm that the login page is legitimate and bypass the browser extension warning.

The domain res-1.cdn.office.net is a legitimate Microsoft Content Delivery Network (CDN) address used to load resources for Office and OneDrive. Browser security extensions occasionally flag these domains due to heuristic database errors, resulting in a false positive.

Inspect the Address Bar

Look at the URL in your browser. Ensure it starts with https:// and clearly shows an official Microsoft domain (e.g., onedrive.live.com).

Bypass the Warning

If the URL is officially Microsoft's, click the 'Continue to site' or 'Proceed anyway' option provided within the Malwarebytes Browser Guard block page.

Update the Extension

Navigate to your browser's extension management page and manually check for updates to Malwarebytes Browser Guard, as security vendors frequently release patches for known false positives.

Verify the Domain and Bypass the False Positive

Watch for Redirects: Do not proceed if the page redirects to an unfamiliar domain or prompts you to download unrecognized files before logging in.

Solution 2

Test OneDrive with an Alternative Method

Access OneDrive through a different browser or mode to determine if the issue is strictly isolated to the browser extension.

Free Microsoft Office alternative

Try WPS Office for a Secure Cloud and Document Experience

If false positives and login issues with Microsoft services are disrupting your workflow, consider switching to WPS Office. It provides a lightweight, highly compatible alternative with its own secure cloud environment.

1. Download the Software: Visit the official WPS Office website and download the free installation package for your operating system.
2. Install and Launch: Run the installer, follow the on-screen prompts, and launch the WPS Office application.
3. Sign In to WPS Cloud: Create a free account or log in to seamlessly sync, edit, and backup your documents across all devices.

Completely free and lightweight office suiteHighly compatible with Microsoft Word, Excel, and PowerPoint formatsBuilt-in secure WPS Cloud storage without disruptive false security alertsFamiliar user interface for a quick and seamless transition

microsoft office alternative - wps office

Frequently Asked Questions

What exactly is res-1.cdn.office.net?

It is a legitimate Content Delivery Network (CDN) domain operated by Microsoft. It is used to quickly load essential website assets like images, scripts, and stylesheets for Microsoft Office online and OneDrive.

Why does Malwarebytes Browser Guard flag official Microsoft sites?

Browser extensions rely on automated blocklists and heuristic scanning. Sometimes, these systems misidentify legitimate CDN traffic as suspicious, resulting in a false positive alert even when the site is safe.

How can I stop Malwarebytes from blocking this domain permanently?

You can add the domain to the 'Allow list' within the Malwarebytes Browser Guard settings. Open the extension menu, navigate to settings or allowances, and add res-1.cdn.office.net to prevent future blocks.

Microsoft Office Security Issues