Security Scan Report: brands.ktb-apps.com

Redirected to: https://login.microsoftonline.com/bd331ea2-2c9c-4c88-a428-dde7aa9fa88f/oauth2/v2.0/authorize?response_type=code&client_id=5ff09802-b127-4cd7-83df-09c1e6608d61&redirect_uri=https%3A%2F%2Fbrands.ktb-apps.com%2Fauth%2Fcallback%2F&scope=openid+profile+email+User.Read&state=Qaap3bKMawNkT37QaTWsbexJBLQ9WF&nonce=vEu99u1pf7qn55S3xhzW&sso_reload=true

Submitted: Apr 2, 2026, 2:02:36 AMCompleted: Apr 2, 2026, 2:03:46 AMpubliccompleted
Loading additional data...

Summary

This website contacted 7 IPs in 4 countries across 7 domains to perform 48 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: http://brands.ktb-apps.com/

Effective URL: https://login.microsoftonline.com/bd331ea2-2c9c-4c88-a428-dde7aa9fa88f/oauth2/v2.0/authorize?response_type=code&client_id=5ff09802-b127-4cd7-83df-09c1e6608d61&redirect_uri=https%3A%2F%2Fbrands.ktb-apps.com%2Fauth%2Fcallback%2F&scope=openid+profile+email+User.Read&state=Qaap3bKMawNkT37QaTWsbexJBLQ9WF&nonce=vEu99u1pf7qn55S3xhzW&sso_reload=trueRedirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Phishing page impersonating Microsoft login; do not enter credentials.

Risk Factors
Brand impersonation (Microsoft) on an unranked domain
Credential harvesting form (email + password)
Cross‑origin submission of credentials to a different domain
Highly obfuscated JavaScript (critical score)
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

Within the commercial generic top-level domain (.com), 'brands.ktb-apps.com' is registered and includes subdomain 'brands'. Its registrable label 'ktb-apps' stretches across 8 characters holding one vowel versus 6 consonants; bonus characters include one hyphen. Breaking it apart gives three words: kt, b, apps. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://brands.ktb-apps.com/

Page Load Overview

0.65s
Total Load Time
32
HTTP Requests
5
Domains
469 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:109 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
813.107.246.44United States
AS8075Microsoft Corporation
440.126.32.134Netherlands
440.126.31.2United StatesUnknown
423.207.210.132IrelandUnknown
420.190.160.5UnknownUnknown
452.178.17.232UnknownUnknown
4187.124.171.11Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
327--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T139834BDABE63193B828A41B5F5B56E02AE7B59038C4CCD60F19CC9882FFB75D9123513

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:jZbm8GLG2rOYTW1WoIyEk77gx2xpTvPoMmCBdEo8iAIC:Fbm8wOYTEWJ32RA9IC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:81778:dEmTCKUygYAQAwRWAgZQIBGqOzBHAABITEBCAhHYkSkAR4m5ZSC1KSgpIAKQqYCAE1YikQBDaeiTJFEC5QYBIAJELgAIoUum

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0010393b373f373f
Perceptual Hash:845971764699d96e
Difference Hash:88e4d2d3e5eee6e6
Wavelet Hash:00003b3b373f373f
Color Hash:#e06cd6

Other Hashes

Crop Resistant:88e4d2d3e5eee6e6

Scan History

Scan history not available

Unable to load historical scan data