ScanMalware.com

Security Scan Report: www.whm.update.03-120-55-020.plesk.page

Redirected to:
https://login.microsoftonline.com/b34ec9cd-0a78-4623-9e54-2885791429c7...
Site favicon
Submitted: Jul 4, 2026, 6:01:55 PMCompleted: Jul 4, 2026, 6:03:07 PMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 3 countries across 4 domains to perform 2 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://www.whm.update.03-120-55-020.plesk.page/auth/oidc/azure

Effective URL: https://login.microsoftonline.com/b34ec9cd-0a78-4623-9e54-2885791429c7/oauth2/v2.0/authorize?access_type=offline&client_id=86a3041a-a218-4ec6-a019-fe40c6d23389&code_challenge=jlOEQK-mHJOnfKeAr1oY6lGzTwd_8Tvo1pakiuCD1CA&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fvpn.hsag-prod.onpower.cloud%2Fauth%2Foidc%2Fazure%2Fcallback&response_type=code&scope=openid+email+profile&state=uwq-tX9KMVwJpeiq&sso_reload=trueRedirected

AI Security Verdict

Low Risk

Confidence: 78%

3
Risk Score

Login page on an unranked domain forwards to Microsoft; potential credential phishing risk despite legitimate SSO flow.

Risk Factors
Credential collection form on an unranked domain
Cross‑origin form submission to a third‑party login provider
Safety Factors
Well‑established domain age (≈24 years)
No malicious IoC or YARA detections
No network IDS alerts
Form appears to be a legitimate SSO redirect to Microsoft
Top-ranked domain (Cisco Umbrella #0, 8760 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 7 to 3
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

The domain name 'www.whm.update.03-120-55-020.plesk.page' uses the .page top-level domain and includes subdomain 'www.whm.update.03-120-55-020'. The core label 'plesk' covers 5 characters containing one vowel alongside 4 consonants. It segments into 2 words: pl, esk. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.whm.update.03-120-55-020.plesk.page/auth/oidc/azure

Page Load Overview

1.26s
Total Load Time
17
HTTP Requests
6
Domains
448 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:109 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
53.120.55.20Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
420.190.159.130Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
440.126.32.68Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
42.16.241.207Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
174--

Detected Technologies5

X-UA-Compatible
100%
PasswordField
100%
Meta-Refresh-Redirect
100%
HTTP/3
40%
Ghost
15%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C8835BE67FA32D3786865474B4B97E02AA3A5D038D48DE64F15CCC842FFA74D8163A43

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Dlbo8GLG2GVe7+qHybo6IZ9Tjuokmap5vPoMLuJd0GRjiyOC:K8EXSbya/AqC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:81458:gAoEZxSCE2WwNKMA6x8AD8sMQRFDZBYRoIiBiA0+gALQETE4CpLi6AoFtQGpAIl9TRS7CEMAYAAVKMAoBAdKdOkHEZYbEDaW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000187858180000
Perceptual Hash:c81d2727c8cf9d8c
Difference Hash:3202b2b2b232e585
Wavelet Hash:030018fafe1f75e5
Color Hash:#643a78

Other Hashes

Crop Resistant:b23062f2b2a093a3,0010403434400060,3202b2b2b232e585

Scan History

Scan history not available

Unable to load historical scan data