Security Scan: Verify you are human

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c75360ff-d336-4245-a45e-dc2cb567d46d Domain and IP registration (RDAP)/api/v1/rdap/c75360ff-d336-4245-a45e-dc2cb567d46dHow often this domain was scanned/api/v1/domain/stats/server-msftlogin.com Scan history for this domain/api/v1/domain/history/server-msftlogin.com?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 11 HTTP transactions. The main domain is server-msftlogin.com and was registered 6 days ago.

Submitted URL: https://server-msftlogin.com/[email protected]

Effective URL:

https://server-msftlogin.com/[email protected]

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Analyst-vetted Microsoft phishing kit on a one-day-old typosquat domain, harvesting passwords and one-time codes relayed to the operator. Do not enter credentials or codes.

Risk Factors (5)

Analyst-vetted known phishing kit (ms-account-otp-relay-2026-11) matched on the page body

Impersonation of Microsoft's account sign-in experience on a non-Microsoft, unranked domain

Password field collecting credentials on a domain less than one day old

Victim email address supplied via URL parameter and displayed as the target account

Deceptive captcha/'verify you are human' overlay referencing microsoft.com

Domain age information unavailable

Details

Page Title

Verify you are human

Scan Type

public

Domain Name Analysis

The domain name 'server-msftlogin.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'server-msftlogin' spans 16 characters containing 4 vowels alongside eleven consonants; it also includes 1 hyphen. Segmentation suggests 4 words: server, ms, ft, login. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

microsoft.com Verify you are human by completing the action below. Venty you are humane microsoft.com needs to review the security of your connection before proceeding.

Page Load Overview

0.49s

Total Load Time

29 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:501 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software61% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

61%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	104.21.63.4Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	172.67.168.244Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	2	-	-

Detected Technologies3

HTTP/3

40%

Cloudflare Bot Management

40%

Cloudflare

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16713079619F30437A5A3E07DBBCBA116733280139106C924BF9C434C5F8AB6587BABDD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:hRiGHjAwudf8vMCB0pH9AwyTTxchDlacVclNX33YAXts6jDmsg3U:GGHMwuduMb3DyTTxKDlHs3Yeu6jAU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:42250:NCGheACASgAgUNxEhVghhYsoUCgQEAscSoBaEAAOMYDw2ERpFSJLikIBBKujQMCnbhkQsABxAl7ISPsEFAQIQaC1jRqxSEoR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f1f1ffffffffff7

Perceptual Hash:9f1f1f8fe0c1e0c0

Difference Hash:6070700000000004

Wavelet Hash:100010f0ffffff00

Color Hash:N/A

Other Hashes

Crop Resistant:6070700000000004

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: server-msftlogin.com