Security Scan Report: numb3rs.criteois.com

Redirected to:
https://login.microsoftonline.com/2a35d8fd-574d-48e3-927c-8c398e225a01...
Site favicon
Submitted: Sep 8, 2026, 8:24:42 AMCompleted: Sep 8, 2026, 8:25:54 AMpubliccompleted

This website contacted 16 IPs in 5 countries across 10 domains to perform 28 HTTP transactions. The main domain is login.microsoftonline.com and was registered 10 years ago.

Submitted URL: https://numb3rs.criteois.com

Effective URL:

https://login.microsoftonline.com/2a35d8fd-574d-48e3-927c-8c398e225a01...
Redirected

AI Security Verdict

Low Risk

Confidence: 95%

2
Risk Score

This is the site's own sign-in page: the credential form submits to a host the operator controls, so the brand shown is their own rather than an impersonation of someone else.

Risk Factors
Unranked/low‑reputation domain used for phishing
Redirect chain to Microsoft login endpoint
Safety Factors
Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 10 to 2
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Domain Name Analysis

The domain 'numb3rs.criteois.com' uses the commercial generic top-level domain (.com), featuring subdomain 'numb3rs'. Its registrable label 'criteois' stretches across 8 characters holding four vowels versus four consonants. Word splitting yields three words: cri, teo, is. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://numb3rs.criteois.com

Page Load Overview

1.31s
Total Load Time
684 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:109 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1313.69.228.10Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
140.126.31.0Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
123.102.12.43Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
120.190.160.20Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
140.126.32.76Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
113.107.246.44Azure · CLOUDUnited States
AS8075Microsoft Corporation
120.190.160.128Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
140.126.31.2Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
120.190.160.132Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
120.190.160.131Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
2816--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C4236CEA7F8428278B4365B580AF7B0BD67D49634444DC89F19EC88D5EF6BEA4633103

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:lFVaVb8J7QLG2RR707PVvuBe8VN7U7jRlv7a7EnSag2uVPTj8Z9TjuvhCknmapr9:lFIZ8GLG2yv8CCRPTIZ9Tjuokmap5vPX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:45923:uBQEXVcKAoJIWGKgU2AbBAQbJEMSYYEIEiIDCkNKGCCzUHiQECGMBEBbQCQVRmAIUDQAKFhAiGEJhDCuFQQEkbDMQKtQMiwS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0101181818180000
Perceptual Hash:88892376ccd9ddcc
Difference Hash:ffcfb3b3b2b2cff3
Wavelet Hash:07071f1f1f1f0707
Color Hash:#bed279

Scan History

Scan history not available

Unable to load historical scan data