ScanMalware.com

Security Scan Report: it-harting.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b43dc62d-068a-4049-abf2-ff15ba72150bDomain and IP registration (RDAP)/api/v1/rdap/b43dc62d-068a-4049-abf2-ff15ba72150bHow often this domain was scanned/api/v1/domain/stats/it-harting.comScan history for this domain/api/v1/domain/history/it-harting.com?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 18 HTTP transactions. The main domain is it-harting.com and was registered 7 months ago.

Submitted URL: https://it-harting.com/app/5WiJwcqaPNAsiaJLYyhJ5f

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Microsoft sign-in page on it-harting.com that harvests email and password into the site's own account.html handler. Clear brand impersonation plus a credential form on an unranked, unrelated domain — do not enter credentials.

Risk Factors (5)
Brand impersonation of Microsoft on a non-Microsoft domain
Credential-harvesting login form (password field) submitting to the suspicious host's own account.html handler
Unranked domain with very low business legitimacy signals (10/100)
Obfuscated random-path URL used as the landing page
No affiliation disclosure between the site and the impersonated brand
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'it-harting.com' is registered with no subdomain. Its registrable label 'it-harting' stretches across 10 characters holding 3 vowels versus six consonants, notching one hyphen. Splitting it apart reveals three words: it, hart, ing. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

BE Microsoft Sign in Email, phone, or Skype No account? Create one! Can't access your account? Terms of use Privacy & cookies...

Page Load Overview

0.81s
Total Load Time
337 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:354 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software55% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
55%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18168.119.171.5Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
181--

Detected Technologies4

PasswordField
100%
Nginx
40%
HSTS
40%
Bootstrap
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14DA1741928F206675367B9EC3B9B930935D4D067F903E60435FC42AC2FAEECE9858346

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nmnsu2nav7PZVh5YuMt+poSVXMN8eQkLWs6Z/+M9:menav7PZVhezKMN2kKPJ+a

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4830:AQBRAIAQCUkgAIaAkASgLJJAAgZMAgAATAAABIQQRCgEMKCAhBECAgyFEAEBIgA8agEgRABkVwIAogAAIBOWQAAEDCEJAhAk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:18001818181f0f1f
Perceptual Hash:9c493326cc99d9ec
Difference Hash:7171733331727e7c
Wavelet Hash:391818181f1f1fbf
Color Hash:N/A

Other Hashes

Crop Resistant:7171733331727e7c

Scan History

Scan history not available

Unable to load historical scan data