Security Report: security-server-landing-page--winterwaldemar1.replit.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2e84291e-e64b-4e3e-a6a5-45cbb74a80b0 Domain and IP registration (RDAP)/api/v1/rdap/2e84291e-e64b-4e3e-a6a5-45cbb74a80b0 Certificate Transparency/api/v1/ct/security-server-landing-page--winterwaldemar1.replit.app How often this domain was scanned/api/v1/domain/stats/security-server-landing-page--winterwaldemar1.replit.app Scan history for this domain/api/v1/domain/history/security-server-landing-page--winterwaldemar1.replit.app?limit=15

This website contacted 8 IPs in 2 countries across 6 domains to perform 7 HTTP transactions. The main domain is security-server-landing-page--winterwaldemar1.replit.app and was registered 9 months ago.

Submitted URL: https://security-server-landing-page--winterwaldemar1.replit.app/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake Microsoft account security-verification login on a free replit.app subdomain. Harvests email and password via a cloned Microsoft sign-in form. Do not enter credentials; report immediately.

Risk Factors (4)

Impersonation of Microsoft's account login on a non-Microsoft domain

Credential harvesting form (email + password) on attacker-controlled hosting platform subdomain

Shared/free instant-publishing namespace (replit.app) — page age unknown and not attributable to the platform apex

Unranked domain claiming to be a major brand's security verification

Domain age information unavailable

Details

Page Title

Security verification - Microsoft account

Scan Type

public

Favicon Hash

MMH3: 162991541

MD5: e4d4a7469f0daff27f96aa5323d81434

Domain Name Analysis

The domain 'security-server-landing-page--winterwaldemar1.replit.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'security-server-landing-page--winterwaldemar1'. The core label 'replit' covers 6 characters holding 2 vowels versus four consonants. Breaking it apart gives two words: rep, lit. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.40s

Total Load Time

81 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:578 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software76% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

76%

government public service

40%

documentation technical

31%

blog personal website

25%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	34.117.33.233Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
0	142.251.13.95Google · CDN	United States	AS15169Google LLC
0	2.21.20.135Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
0	35.190.3.23Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
0	23.52.181.212Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
0	172.67.69.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	192.178.183.95Google · CDN	United States	AS15169Google LLC
0	104.26.8.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	8	-	-