Security Report: fls-a2ad49dc-e995-4e79-b405-74a8b7762642.laravel.cloud - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/43e40b39-3732-46ec-aa46-900e24e70ee9 Domain and IP registration (RDAP)/api/v1/rdap/43e40b39-3732-46ec-aa46-900e24e70ee9How often this domain was scanned/api/v1/domain/stats/fls-a2ad49dc-e995-4e79-b405-74a8b7762642.laravel.cloud Scan history for this domain/api/v1/domain/history/fls-a2ad49dc-e995-4e79-b405-74a8b7762642.laravel.cloud?limit=15

This website contacted 8 IPs in 2 countries across 5 domains to perform 9 HTTP transactions. The main domain is laravel.cloud and was registered 9 years ago.

Submitted URL: https://fls-a2ad49dc-e995-4e79-b405-74a8b7762642.laravel.cloud/winbot.html

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Microsoft-branded credential phishing on a laravel.cloud subdomain: a fake 'security verification' password form feeds a Telegram exfiltration bot. Do not enter credentials.

Risk Factors (6)

Brand impersonation of Microsoft on a non-Microsoft domain

Credential-harvesting password form disguised as a Microsoft security verification step

Telegram bot token in page script enabling credential exfiltration

External IP-lookup call used to profile victims

Multiple redirects to the phishing landing page

Social-engineering error messages ('Your password is incorrect') to re-prompt for credentials

Domain age information unavailable

Details

Page Title

Security verification - Microsoft account

Scan Type

public

Domain Name Analysis

The domain 'fls-a2ad49dc-e995-4e79-b405-74a8b7762642.laravel.cloud' uses the .cloud top-level domain and includes subdomain 'fls-a2ad49dc-e995-4e79-b405-74a8b7762642'. The core label 'laravel' covers 7 characters split between 3 vowels and four consonants. Splitting it apart reveals two words: la, ravel. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

BE Microsoft Security verification Continue to account settings Falkenstein, Germany + 178,63.16.224 Email, phone, or Skype No account? Create onel Can't access your account? 6.2026 Microsof | P...

Page Load Overview

0.36s

Total Load Time

66 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:522 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software72% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

72%

documentation technical

32%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	103.133.1.2Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	23.194.190.163Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	104.26.8.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	23.52.181.212Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
1	103.133.1.1Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
1	23.194.190.161Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	104.26.9.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	8	-	-