Security Report: security-server-page--billymorg6.replit.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/689b3d7d-a11e-4a45-b256-f3e86fc75cf0 Domain and IP registration (RDAP)/api/v1/rdap/689b3d7d-a11e-4a45-b256-f3e86fc75cf0 Certificate Transparency/api/v1/ct/security-server-page--billymorg6.replit.app How often this domain was scanned/api/v1/domain/stats/security-server-page--billymorg6.replit.app Scan history for this domain/api/v1/domain/history/security-server-page--billymorg6.replit.app?limit=15

This website contacted 8 IPs in 2 countries across 6 domains to perform 7 HTTP transactions. The main domain is security-server-page--billymorg6.replit.app and was registered 9 months ago.

Submitted URL: https://security-server-page--billymorg6.replit.app/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake Microsoft account security-verification login on a replit.app subdomain that harvests email and password credentials. Flagged by Google Safe Browsing for social engineering — do not enter any credentials.

Risk Factors (5)

Microsoft brand impersonation on an unrelated, unranked replit.app shared-hosting tenant

Password + email credential capture form on a lookalike Microsoft login page

Google Safe Browsing Social Engineering detection

External IP-lookup/geolocation calls (ipapi.co) used to localize the fake login lure

Inline scripts using encoding/decoding functions consistent with an obfuscated phishing kit

Domain age information unavailable

Details

Page Title

Security verification - Microsoft account

Scan Type

public

Favicon Hash

MMH3: 1411728873

MD5: a32b0abe2ae643db173ed348889d5558

Domain Name Analysis

The domain name 'security-server-page--billymorg6.replit.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'security-server-page--billymorg6'. The core label 'replit' covers 6 characters containing 2 vowels alongside four consonants. It segments into 2 words: rep, lit. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.99s

Total Load Time

80 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:583 chars

Detector Agreement:33%

Website Classification

Primary Category

technology software77% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

77%

government public service

38%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	34.117.33.233Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
0	142.251.20.95Google · CDN	United States	AS15169Google LLC
0	2.18.64.204Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
0	35.190.3.23Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
0	23.52.181.212Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
0	104.26.9.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	172.67.74.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	23.59.18.102Akamai · CDN	Hamburg, Free and Hanseatic City of Hamburg, Germany	AS16625Akamai Technologies, Inc.
7	8	-	-