Security Scan Report: prosupport.hrblock.ca

Redirected to: https://login.microsoftonline.com/76893b2f-0afa-45ba-a772-ee02933cd8d8/oauth2/v2.0/authorize?response_type=code+id_token&redirect_uri=https%3A%2F%2Fprosupport.hrblock.ca%2F.auth%2Flogin%2Faad%2Fcallback&client_id=b3882726-023a-45cc-be18-1576404a13a4&scope=openid+profile+email&response_mode=form_post&nonce=edfd507293f84eed853e238a3ae32eaf_20260228225206&state=redir%3D%252F&sso_reload=true

Site favicon
Submitted: Feb 28, 2026, 10:47:04 PMCompleted: Feb 28, 2026, 10:48:14 PMpubliccompleted
Loading additional data...

Summary

This website contacted 8 IPs in 4 countries across 8 domains to perform 1 HTTP transaction. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://prosupport.hrblock.ca

Effective URL: https://login.microsoftonline.com/76893b2f-0afa-45ba-a772-ee02933cd8d8/oauth2/v2.0/authorize?response_type=code+id_token&redirect_uri=https%3A%2F%2Fprosupport.hrblock.ca%2F.auth%2Flogin%2Faad%2Fcallback&client_id=b3882726-023a-45cc-be18-1576404a13a4&scope=openid+profile+email&response_mode=form_post&nonce=edfd507293f84eed853e238a3ae32eaf_20260228225206&state=redir%3D%252F&sso_reload=trueRedirected

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Phishing page impersonating Microsoft login; do not enter credentials and report as scam.

Risk Factors
Brand impersonation (Microsoft) on an unrelated, unranked domain
Cross‑origin credential form (email + password) submitting to Microsoft login endpoint
Unranked domain despite brand claim
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

You're looking at domain 'prosupport.hrblock.ca' on the Canadian country-code top-level domain (.ca); it also runs on subdomain 'prosupport'. The registrable portion 'hrblock' spans 7 characters with 1 vowel and six consonants. Word splitting yields two words: hr, block. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://prosupport.hrblock.ca

Page Load Overview

2.19s
Total Load Time
31
HTTP Requests
7
Domains
558 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:109 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1013.107.213.44Ireland
340.126.31.0Netherlands
340.126.32.134GermanyUnknown
320.115.232.11United States
AS8075Microsoft Corporation
323.207.210.132UnknownUnknown
320.44.10.122UnknownUnknown
340.126.32.136UnknownUnknown
320.190.160.128UnknownUnknown
318--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13B835ADA7EA7283B828A44B4B5B53E02AE3A5903884CDD74F15CCD842FFB74D8127657

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:lsTb8GLGG8vzl9ueoIyEk77gx2xpTvPoMmCm/EAti0C:aTb8Lvzl8eJ32RARC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:80957:LKsqIBC+6MsogMBJQqA3bGRUJQKgHAigAIEeoAAJJU8QASMAqWgANgMiIiZAKjQK2BkRQWGFQnhfVQQCGPmXEwIBUYTQbtgI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818786000
Perceptual Hash:c81f33629cd999cc
Difference Hash:300cb2b2b2b2c0a3
Wavelet Hash:00003c3cf8f8f8ff
Color Hash:#2d864c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data