Security Scan Report: background-check-status.com

Redirected to:
https://background-check-status.com/6197094-oH1faBZb-PKS9Q
Submitted: Sep 21, 2026, 2:57:35 PMCompleted: Sep 21, 2026, 2:57:57 PMpubliccompleted

This website contacted 6 IPs in 2 countries across 2 domains to perform 11 HTTP transactions. The main domain is background-check-status.com and was registered 7 years ago.

Submitted URL: http://background-check-status.com/6197094-oH1faBZb-PKS9Q

Effective URL:

https://background-check-status.com/6197094-oH1faBZb-PKS9Q
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Phishing page impersonating Microsoft's login on unranked background-check-status.com, capturing email and password. Do not enter credentials.

Risk Factors
Brand impersonation of Microsoft on a non-official, unrelated domain
Credential/password capture form mimicking a trusted login provider
Unranked domain with no legitimate reputation claiming a major brand identity
Deceptive URL path (/tracking/de/…) imitating Microsoft SSO flow
Domain age information unavailable

Details

Page Title

Microsoft Login Page

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'background-check-status.com' is registered and has no subdomain. The core label 'background-check-status' covers 23 characters containing six vowels alongside 15 consonants; bonus characters include 2 hyphens. Breaking it apart gives three words: background, check, status. Expect 6 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://background-check-status.com/6197094-oH1faBZb-PKS9Q

Page Load Overview

1.52s
Total Load Time
134 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:68%
Script:Latin
Direction:ltr

Detection Details

Text Length:105 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software74% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
74%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
644.235.171.222Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
12.21.239.135Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
123.207.210.130Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
116.146.229.131Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
152.25.128.212Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
123.207.210.132Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
116--

Detected Technologies3

JQueryv3.6.1
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D9E0F1A460285481890393C0C5D03A0472D9E5168B90D9C1A7D8C46D89AF2F1F84195E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:kxt+tGA4x8U0RB26M9lmNW1fNQbzN/GHHzpAN+j:kfqNLU0RAv6ImzNATC+j

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:6f91dca173960a9c34adff7e5433d041

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3fffffffffffff
Perceptual Hash:800000007fffffff
Difference Hash:c0c0000000000000
Wavelet Hash:3070f0f0f0f0f0f0
Color Hash:#ac535f

Other Hashes

Crop Resistant:c0c0000000000000

Scan History

Scan history not available

Unable to load historical scan data