Security Scan: Sign in to your Microsoft account

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/40c59bf1-16d7-4d47-baf8-ff087b9afd9d Domain and IP registration (RDAP)/api/v1/rdap/40c59bf1-16d7-4d47-baf8-ff087b9afd9dHow often this domain was scanned/api/v1/domain/stats/editable-static-website--laboratorium13.replit.app Scan history for this domain/api/v1/domain/history/editable-static-website--laboratorium13.replit.app?limit=15

This website contacted 2 IPs in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is replit.app and was registered 5 years ago.

Submitted URL: https://editable-static-website--laboratorium13.replit.app/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Confirmed Microsoft credential-phishing page on a Replit subdomain: it mimics the Microsoft sign-in, captures email and passwords, and exfiltrates them via a Telegram send function. Do not enter credentials.

Risk Factors (5)

Brand impersonation of Microsoft on a non-Microsoft domain

Credential exfiltration to external server via Telegram (sendToTelegram) — confirmed phishing behavior

Password and email fields harvested with a 'Re-enter password' / 'Verify' step typical of credential-capture kits

Fake reassurance text ('Email loaded from secure link', 'You will be redirected to Microsoft Account Security Center shortly...') to lower victim suspicion

Deceptive hostname on shared Replit hosting with no relationship to Microsoft

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: -1615627744

MD5: 1cd811006bf9122b6b8906e6cb4dba75

Domain Name Analysis

Domain 'editable-static-website--laboratorium13.replit.app' uses the application-focused generic top-level domain (.app) with subdomain 'editable-static-website--laboratorium13'. The core label 'replit' covers 6 characters split between two vowels and 4 consonants. Tokenizing the label suggests two words: rep, lit. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

oo000 Sign in Use your Microsoft account sron | Forgot password? No account? Create one! @ Signin s protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. Terms of use...

Page Load Overview

1.18s

Total Load Time

37 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:743 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software52% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

52%

government public service

29%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	34.117.33.233Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	35.190.3.23Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
2	2	-	-