ScanMalware.com

Security Scan Report: gsv-securesafe-b2e.app.mobiliar.ch

Redirected to:
https://login.microsoftonline.com/common/oauth2/authorize?response_typ...
Site favicon
Submitted: Dec 3, 2025, 1:55:52 PMCompleted: Dec 3, 2025, 1:57:48 PMpubliccompleted
Loading additional data...

Summary

This website contacted 42 IPs in 4 countries across 5 domains to perform 19 HTTP transactions. The main domain is login.microsoftonline.com.

Submitted URL: http://gsv-securesafe-b2e.app.mobiliar.ch/

Effective URL: https://login.microsoftonline.com/common/oauth2/authorize?response_type=code+id_token&redirect_uri=https%3A%2F%2Fgsv-securesafe-b2e.app.mobiliar.ch%2F.auth%2Flogin%2Faad%2Fcallback&client_id=03cc0417-a782-42d2-a0ad-8baca80b75e8&scope=openid+profile+email&response_mode=form_post&resource=10b5ce38-c21d-4c00-b215-0d3e2b16da65&nonce=0bd187d818cb44b8afe86083533040f1_20251203140214&state=redir%3D%252F&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #787,487 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 88%

2
Risk Score

High‑risk credential phishing site impersonating Microsoft; avoid interaction.

Risk Factors
Brand impersonation of Microsoft
Low domain reputation rank
Unknown domain age
Credential collection on a non‑official domain
Safety Factors
No malicious JavaScript or YARA matches detected
No network IDS alerts
Form posts to legitimate Microsoft login endpoint
Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 8 to 2
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

Within the Swiss country-code top-level domain (.ch), 'gsv-securesafe-b2e.app.mobiliar.ch' is registered; it also runs on subdomain 'gsv-securesafe-b2e.app'. The second-level label 'mobiliar' is 8 characters long containing 4 vowels alongside four consonants. Tokenizing the label suggests two words: mobil, iar. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://gsv-securesafe-b2e.app.mobiliar.ch/

Page Load Overview

0.47s
Total Load Time
19
HTTP Requests
5
Domains
460 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:133 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1223.207.210.137Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
320.190.160.4Amsterdam, North Holland, Netherlands
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
120.190.159.129Dublin, Leinster, Ireland
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
120.190.160.14Amsterdam, North Holland, Netherlands
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
120.208.6.0Zurich, Zurich, Switzerland
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
040.126.32.72Amsterdam, North Holland, Netherlands
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
040.126.32.136Amsterdam, North Holland, Netherlands
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
023.207.210.132Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
040.126.31.129Dublin, Leinster, Ireland
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
02603:1027:1:158::8Amsterdam, North Holland, Netherlands
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
1942--

Detected Technologies4

X-UA-Compatible
100%
PasswordField
100%
Meta-Refresh-Redirect
100%
Ghost
15%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1047339DABEF21937878A45B474B97E02AA3A99039D4CDD60F24C89C02FF7B0D8127557

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:l4zv8GLGGx6rivVZXq50/+lSDzTEyqU6MVnvnaloMPbhEfCi4JvhC:W8EVMSWyS2Y/C

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:76089:qQlgIgBg4ggQgVZnQtEQAAEQSgBSEYEASRRDaYALNAF5REoSWwFkCgMiQCEi3swIKRRgoaDGYVESwEYQwMQxACYFRoSiJQIS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c1e1e7f33734f30
Perceptual Hash:8d12526d67926d6d
Difference Hash:d8b0b0d9d6e6d9d5
Wavelet Hash:3c1e1e3f33330f30
Color Hash:#b96ce0

Other Hashes

Crop Resistant:d8b0b0d9d6e6d9d5

Scan History

Scan history not available

Unable to load historical scan data