Security Scan: Sign in to your account

Summary

This website contacted 9 IPs in 5 countries across 5 domains to perform 18 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://livepersondemosecure.work.net.au/mellon/login?ReturnTo=https%3A%2F%2Flivepersondemosecure.work.net.au%2Fimages%2FchangePasswordH.svg&IdP=https%3A%2F%2Fsts.windows.net%2F6b266aa6%2D073f%2D49c3%2Da025%2Dacb784dc3749%2F

Effective URL: https://login.microsoftonline.com/6b266aa6-073f-49c3-a025-acb784dc3749/saml2?SAMLRequest=lZLLbtswEEV%2FReBeD0u2bBG2AcOyAQNJEDhtF9kUDD1uiPKhcEZJ%2BvcdyWjhblJkRWI4dy7PxSxROdvJTU%2FP%2FggvPSAl7856lOPDSvTRy6DQoPTKAUrS8mFzeyPLrJBdDBR0sOJK8rFCIUIkE7xIDu1KfG%2BnRbkoJ7v9ZtHsqrauql0xK%2Fmy386KZt%2BI5BtE5P6VYDmLEHs4eCTliUtFWafFLC2aL5NGVrWczB9F0jKD8YpG1TNRhzLPbfhhfOaMjgHDmYK3xkOmg8vrp7KuleJB8%2BqcThtdpaooZ6nST%2FPF9KSr%2BbTJB7JSJNvgEQbnjxj1pUnqPkY%2BU%2BM6a7QhkexD1DBGvRJnZREGoHvOxLzC38rmT0SDWe8gPkB8NRq%2BHm%2BucFjRcTLBn8AFBPaC7C3En5kHylSfO7A2%2BLwLSEfAbviSWC8HDDlmGNefHeWA1EmRWubXU5aX%2FbnjFA7tfWDQXwOmU%2F8JaaiYU3oeWyVF5dFwWIzPZm%2FbCIo4Eoo9iHx9sfx3S9e%2FAQ%3D%3D&RelayState=https%3A%2F%2Flivepersondemosecure.work.net.au%2Fimages%2FchangePasswordH.svg&SigAlg=http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fxmldsig%23rsa-sha1&Signature=Ic6FYjGrgjM1jex1e4vZCltYnExOnVB%2BuhmZTCPhsem7FfCmBtO2YhIPuysl1A%2F%2BNakDqE0g26a6a5inO74INKuUpmbUBSsGOCXwScJ0FRxVWcLBSPsJbw%2Ff4InxLEw8UDG0JcluLb0gIJtnWXq1BtXtrogKe3ckJfWN9Lz6cuK%2FpYUZj%2BuTDV64sUmygBhNbAr9XyYQONFX%2FaxcG42gWSa05PYRkoJmdVtBZpLCfRJPECTjZPcgsfN1UEw2LnGTDHO0uReZjVOU9tmfXRYeH3dL0TH5aGQ9Ysv84esvE5q8apy8mDVsjlSFQyYpFz93EfTz4hcS1F9iZR5nyMdU1g%3D%3D&sso_reload=trueRedirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

The site pretends to be a Microsoft login page, uses an unranked domain, collects credentials, and triggers critical malware alerts – confirmed scam.

Risk Factors

Unranked domain with brand impersonation

Credential collection on unrelated domain

Critical network IDS malware alerts

High JavaScript obfuscation and suspicious static analysis patterns

Large HTTP POST requests (potential data exfiltration)

Domain age information unavailable

Details

Page Title

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Screenshot

Page Load Overview

3.04s

Total Load Time

HTTP Requests

Domains

467 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:en

Text Length:109 chars

Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence

Type: webapp

Method: structural

All Detected Categories

No categories detected

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	40.126.31.71	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
2	40.126.31.73	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
2	23.207.210.137	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	20.190.159.128	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
2	40.126.32.74	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
2	13.107.246.44	United States	AS8075Microsoft Corporation
2	40.126.31.128	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
2	23.207.210.132	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	60.242.241.110	Sydney, New South Wales, Australia	AS7545TPG Telecom Limited
18	9	-	-