ScanMalware.com

Security Scan Report: itemtracking.odm.cloud.next

Redirected to:
https://login.microsoftonline.com/f009f285-5242-433a-9365-daa1edf145c3...
Submitted: Dec 30, 2025, 5:25:28 AMCompleted: Dec 30, 2025, 5:28:22 AMpubliccompleted
Loading additional data...

Summary

This website contacted 11 IPs in 3 countries across 9 domains to perform 53 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://itemtracking.odm.cloud.next

Effective URL: https://login.microsoftonline.com/f009f285-5242-433a-9365-daa1edf145c3/oauth2/authorize?response_type=code+id_token&redirect_uri=https%3A%2F%2Fitemtracking.odm.cloud.next%2F.auth%2Flogin%2Faad%2Fcallback&client_id=163602c7-d1a8-4114-a7fd-e6d0ae2167f6&scope=openid+profile+email&response_mode=form_post&nonce=2a22ea3d400d43b59bd461ef59b73a72_20251230053131&state=redir%3D%252F.auth%252Fcomplete&sso_reload=trueRedirected

AI Security Verdict

Low Risk

Confidence: 88%

2
Risk Score

The site impersonates the NEXT brand and harvests credentials via a login form that posts to Microsoft, indicating a high‑risk phishing page.

Risk Factors
Brand impersonation
External form submission to Microsoft login
Credential collection (email/password)
High JavaScript obfuscation score
Unranked domain reputation
Safety Factors
No Indicators of Compromise matches
No YARA malware detections
No network IDS alerts
Cross‑origin submission appears to be a legitimate SSO flow
Domain age is well‑established
Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 7 to 2
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

finance banking

(49%)

Domain Information

The domain name 'itemtracking.odm.cloud.next' uses the .next top-level domain with subdomain 'itemtracking.odm'. Its registrable label 'cloud' stretches across 5 characters containing two vowels alongside 3 consonants. Segmentation suggests 1 word: cloud. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://itemtracking.odm.cloud.next

Page Load Overview

86.59s
Total Load Time
11
HTTP Requests
4
Domains
74 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:97 chars
Detector Agreement:67%

Website Classification

Primary Category

finance banking49% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
49%
technology software
43%
news media journalism
42%
healthcare medical
37%
documentation technical
31%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
113.107.246.44United States
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
140.126.31.3Dublin, Leinster, Ireland
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
120.190.160.128Netherlands
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
113.107.246.45Unknown
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
123.207.210.137Unknown
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
140.126.31.1Unknown
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
152.178.17.232Unknown
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
118.66.137.42Unknown
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
151.124.91.155Amsterdam, North Holland, Netherlands
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
120.190.160.20Unknown
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
1111--

Detected Technologies4

X-UA-Compatible
100%
PasswordField
100%
Meta-Refresh-Redirect
100%
Ghost
15%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FD835BEA7EB72933828641B9B5B57D06AF3A5903894CDD60B09CCD842FFA70D8127647

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:jU8GLGG2gskdJSpy8UzzTEyqU6MVnvnaloMPg2EJiQicSC:Y8PfzUmyS2WC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:81265:O8bKrApEwuDRgam0AILpECAEAFkSjJOcEKjO2RIANnAyJsbCEJ/BACDBCOgJA0oiEcYYUFCAgHYE9AEMg5zBoQFRSUEAcyEE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:889d3236dcd999cc
Difference Hash:3dcdb2b2b2f0cdcd
Wavelet Hash:07657c7e7e3c6500
Color Hash:#c587a6

Other Hashes

Crop Resistant:9a3072babaa28382,48a0c2b2b2ea808a,3dcdb2b2b2f0cdcd

Scan History

Scan history not available

Unable to load historical scan data