ScanMalware.com

Security Scan Report: txgroup.wincasa-clients.ch

Redirected to:
https://login.microsoftonline.com/d59074ce-b623-486b-84cf-f28eff4bff30...
Site favicon
Submitted: Jun 15, 2026, 7:49:52 PMCompleted: Jun 15, 2026, 7:51:04 PMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 4 countries across 5 domains to perform 2 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: http://txgroup.wincasa-clients.ch/

Effective URL: https://login.microsoftonline.com/d59074ce-b623-486b-84cf-f28eff4bff30/oauth2/authorize?response_type=id_token&redirect_uri=https%3A%2F%2Ftxgroup.wincasa-clients.ch%2F.auth%2Flogin%2Faad%2Fcallback&client_id=6237d65c-4ae9-490b-8003-f4d945dd41e8&scope=openid+profile+email&response_mode=form_post&nonce=90ea96e83d2148d59d6a5976dde5fadf_20260615195454&state=redir%3D%252F&sso_reload=trueRedirected

AI Security Verdict

Low Risk

Confidence: 88%

2
Risk Score

The site impersonates the Wincasa brand and harvests credentials via a login form with heavily obfuscated JavaScript, indicating a high‑risk phishing attempt.

Risk Factors
Brand impersonation
Credential collection form
Highly obfuscated JavaScript
Unranked domain reputation
Cross‑origin form action to external login service
Safety Factors
Domain age 8747 days (well‑established)
No Indicators of Compromise matches
No YARA malware detections
No network IDS alerts
Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 8 to 2
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

The domain name 'txgroup.wincasa-clients.ch' uses the Swiss country-code top-level domain (.ch) with subdomain 'txgroup'. The registrable portion 'wincasa-clients' spans 15 characters with 5 vowels and 9 consonants, plus one hyphen. Word splitting yields 3 words: win, casa, clients. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://txgroup.wincasa-clients.ch/

Page Load Overview

1.00s
Total Load Time
32
HTTP Requests
7
Domains
484 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:109 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
851.107.50.0Zurich, Zurich, Switzerland
AS8075Microsoft Corporation
640.126.31.129Dublin, Leinster, Ireland
AS8075Microsoft Corporation
613.107.246.44United States
AS8075Microsoft Corporation
640.126.32.134Amsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
640.126.31.71Dublin, Leinster, Ireland
AS8075Microsoft Corporation
325--

Detected Technologies4

X-UA-Compatible
100%
PasswordField
100%
Meta-Refresh-Redirect
100%
Ghost
15%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F9835BD97EA7693B828A40B9B5BA7E02AA3659038D4CDD64F05CCC842FFB75C8037547

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Dk8GLG2k4a0r/dCc9E+aCoAIZ9Tjuokmap5vPoMLuBMq0nkJi7nCiC:4890JCwaCga/AcCiC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:81222:HeAEAdAUAQDIIIIFhKoAxEirxQIuJIJKCkAYilFAAmwB5hVDmNJ5oPAqELACRYKCahQNQLRKADqCCQagqgIgsiMECAjZAYEL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000383818182000
Perceptual Hash:cd983722dc8dc9cc
Difference Hash:9cccf2b2b3f3c6e6
Wavelet Hash:7f7f383838783070
Color Hash:#3b783a

Other Hashes

Crop Resistant:e018f8b2b2a28382,8400c23232628088,9cccf2b2b3f3c6e6

Scan History

Scan history not available

Unable to load historical scan data