Security Scan Report: certicare.pages.dev

Redirected to:
https://login.microsoftonline.com/84271ed1-2474-4b75-9d2a-60dd7a0c15c5...
Site favicon
Submitted: Sep 18, 2026, 7:09:30 AMCompleted: Sep 18, 2026, 7:09:54 AMpubliccompleted

This website contacted 10 IPs in 3 countries across 6 domains to perform 13 HTTP transactions. The main domain is login.microsoftonline.com and was registered 31 years ago.

Submitted URL: http://certicare.pages.dev/

Effective URL:

https://login.microsoftonline.com/84271ed1-2474-4b75-9d2a-60dd7a0c15c5...
Redirected

AI Security Verdict

Low Risk

Confidence: 62%

2
Risk Score

Redirect chain lands on the genuine Microsoft OAuth sign-in page (login.microsoftonline.com) with a real form posting back to Microsoft. No IoC, YARA, or exfiltration; only the anonymous pages.dev entry subdomain is unverified.

Risk Factors (3)
Navigation began on an anonymous, unranked Cloudflare Pages subdomain (certicare.pages.dev) of unknown creation date before handing off to Microsoft login.
High volume of Function() constructor calls (158) in the served page's scripts — typical of Microsoft's login framework but a code-generation signal worth noting.
Two MEDIUM Suricata INFO alerts for pages.dev DNS/TLS traffic (informational only).
Safety Factors (4)
The page actually served is Microsoft's official sign-in on the microsoftonline.com domain, loading assets from Microsoft CDNs (aadcdn.msauth.net, aadcdn.msftauth.net).
The credential form submits to a Microsoft-owned endpoint, consistent with a standard OAuth 2.0 / SSO authorization flow.
No threat-intelligence matches, no YARA malware, no credential exfiltration, and no disguised password fields.
Brand check passed — no impersonation of a different entity's brand detected.
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Domain Name Analysis

You're looking at domain 'certicare.pages.dev' on the developer-focused generic top-level domain (.dev); it also runs on subdomain 'certicare'. Count 5 characters in 'pages' containing 2 vowels alongside three consonants. It segments into 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://certicare.pages.dev/

Page Load Overview

3.02s
Total Load Time
86 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:129 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
440.126.31.1Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
123.207.210.136Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
140.126.31.129Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
120.190.159.71Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
120.190.159.128Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
140.126.31.131Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
113.107.246.44Azure · CLOUDUnited States
AS8075Microsoft Corporation
120.190.159.130Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
1310--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T141234CEA3F84342B8BC255B5C0EE7B06957D49575888CCC8F28DC98C5EBAB9A4537213

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:jrkBk68J7QLG2RFkKgBxRVskXzhSa3PLNoTj8Z9TjuvhCknmaprVvPoMLaZczg1L:je8GLG2kVxz5oTIZ9Tjuokmap5vPoML+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:47028:UFggICgMf6IMDYSBwKcERAAJAZEB0UIi0YCKQ0CUBAjmaYoAvAARDsAVJwjYCx4MMbi8E0I1KCCSQEBwG14WGBiIAYCBiAgQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f78181818180000
Perceptual Hash:9d8563a28c1ecdd9
Difference Hash:dec232b2b2b2a872
Wavelet Hash:fffefa1e5a180010
Color Hash:#40bfa2

Scan History

Scan history not available

Unable to load historical scan data