Security Scan Report: whm.en.dev.wwwen.03-120-55-020.plesk.page

Redirected to:
https://login.microsoftonline.com/b34ec9cd-0a78-4623-9e54-2885791429c7...
Site favicon
Submitted: Aug 3, 2026, 1:38:18 AMCompleted: Aug 3, 2026, 1:39:32 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 4 countries across 4 domains to perform 2 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://whm.en.dev.wwwen.03-120-55-020.plesk.page/auth/oidc/azure

Effective URL: https://login.microsoftonline.com/b34ec9cd-0a78-4623-9e54-2885791429c7/oauth2/v2.0/authorize?access_type=offline&client_id=86a3041a-a218-4ec6-a019-fe40c6d23389&code_challenge=iIrfc8LHLGhvYr67M3wqGTlN_0ySPGRZ2g3_YQvM-44&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fvpn.hsag-prod.onpower.cloud%2Fauth%2Foidc%2Fazure%2Fcallback&response_type=code&scope=openid+email+profile&state=XPnF6gI2R0tUyiEG&sso_reload=trueRedirected

AI Security Verdict

Moderate Risk

Confidence: 72%

4
Risk Score

The page contains a login form on an unranked domain but forwards credentials to Microsoft’s official login endpoint; no malicious indicators were found, so treat as moderate risk.

Risk Factors
Unranked domain (not in Cisco Umbrella top 1M)
Credential collection on a domain unrelated to the brand
Safety Factors
Form posts directly to Microsoft’s legitimate OAuth endpoint
No Indicators of Compromise, YARA matches, or IDS alerts detected
Domain age is well established (≈24 years)
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

documentation technical

(26%)

Domain Information

The domain name 'whm.en.dev.wwwen.03-120-55-020.plesk.page' uses the .page top-level domain and includes subdomain 'whm.en.dev.wwwen.03-120-55-020'. The second-level label 'plesk' is 5 characters long holding one vowel versus four consonants. It segments into two words: pl, esk. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://whm.en.dev.wwwen.03-120-55-020.plesk.page/auth/oidc/azure

Page Load Overview

1.82s
Total Load Time
16
HTTP Requests
5
Domains
450 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:109 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical26% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
26%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
413.107.246.44Azure · CLOUDUnited States
AS8075Microsoft Corporation
420.190.160.67Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
440.126.31.2Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
43.120.55.20Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
164--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T179835BDA7EA21937C28A45B1B4B93E02AE3658038D48DDB4F19CCD842FFB75C8127657

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:D/7o8GLG2hVVhny65wo+IZ9Tjuokmap5vPoMLuJne0GRjidC:o8kdnwma/AfXC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:81283:EyBWy2AY6FQAFTCcCAkiBEAgWIXW+eASEgA3Kgoy3SIHYgaQCXGpQAAAA4PBQKKgyABUcAmwQCeIrJcBckAoQCLkOhICRSoA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000187858180000
Perceptual Hash:c81d2727c8cf9d8c
Difference Hash:3202b2b2b232e585
Wavelet Hash:030018fafe1f75e5
Color Hash:#a0d279

Scan History

Scan history not available

Unable to load historical scan data