Security Scan Report: mitid-support.cam

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 13 HTTP transactions. The main domain is mitid-support.cam and was registered 1 month ago.

Submitted URL: https://mitid-support.cam/

AI Security Verdict

Moderate Risk

Confidence: 80%

5
Risk Score

Suspicious new domain mitid-support.cam hosts a ScreenConnect-branded remote support portal with no forms, likely a phishing lure impersonating MitID support. Avoid entering credentials or joining sessions.

Risk Factors (6)
New domain (40 days old) with risk multiplier
Unranked in Cisco Umbrella top 1M
Deceptive domain name impersonating MitID support
Brand mismatch: ScreenConnect branded portal on mitid-support.cam
Suspicious .cam TLD frequently used in phishing
Multiple IDS alerts for .cam domain traffic
Safety Factors (6)
No password, payment, or other forms present on the page
No threat-intel IoC matches
No JavaScript malware patterns (hunting rule) detected
No obfuscated JavaScript or credential exfiltration behavior
Page content is generic remote support portal text
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal β€” credential-phishing framing unsupported; risk adjusted from 6 to 5
Domain age information unavailable

Details

Page Title

ScreenConnect Remote Support Software

Scan Type

public

Domain Name Analysis

Domain 'mitid-support.cam' uses the .cam top-level domain. The core label 'mitid-support' covers 13 characters holding 4 vowels versus 8 consonants; bonus characters include one hyphen. Tokenizing the label suggests three words: mit, id, support. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

& ScreenConnect BP Login No sessions are currently publicly listed jelcome to our online remote met or have invitation codes. You may have supp d collab on portal an invitation in your email that yo...

Page Load Overview

14.56s
Total Load Time
346 KB
Total Size

Language Analysis

Primary Language

πŸ‡ΊπŸ‡ΈEnglish
Code: en
Confidence:60%
Script:Latin
Direction:ltr

Detection Details

Text Length:439 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical41% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
41%
technology software
28%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1391.121.235.121France
AS16276OVH SAS
131--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10DF2D6D1F38E107341BAA02EDA6F10C96B7D40F4B021AC33FC69DD846BE9A4E5751B99

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:4qKXRNlzRGIdu6ZdBobW/l/P3/bL/bE/yUJmgeFDanybqw7TAy0tIB9:4qKXRNlzRGIduydQipPvb7bkyX1ayqVG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:34698:MAKA4CjQAIATKCMKwRQiSQGkAIBgJwcBiVBIPDJEEKCQGIAEQCrLObKRFhoGLCyOllwMEEYwJWAEAEEQsAkAJVgGRIAJDAIC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7c200007000
Perceptual Hash:e4b7cc982f6133c4
Difference Hash:16248c8e2698e2e7
Wavelet Hash:ffffe7e390007000
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data