ScanMalware.com

Security Scan Report: lohndcresxzawe.z5.web.core.windows.net

Submitted: Nov 13, 2025, 2:19:12 AMCompleted: Nov 13, 2025, 2:19:52 AMpubliccompleted
Loading additional data...

Summary

This website contacted 18 IPs in 2 countries across 3 domains to perform 5 HTTP transactions. The main domain is lohndcresxzawe.z5.web.core.windows.net and was registered NaN years ago.

Submitted URL: https://lohndcresxzawe.z5.web.core.windows.net/

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Credential‑harvesting phishing site impersonating Netflix on a cloud storage domain.

Risk Factors
Cloud storage hosting with credential collection
Password field on suspicious domain
Brand impersonation/typosquatting
Hidden password field
Unranked domain claiming major brand
Domain age information unavailable

Details

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

Netflix

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

entertainment media

(91%)

Domain Information

Domain 'lohndcresxzawe.z5.web.core.windows.net' uses the network infrastructure generic top-level domain (.net) with subdomain 'lohndcresxzawe.z5.web.core'. Its registrable label 'windows' stretches across 7 characters holding 2 vowels versus five consonants. It segments into 1 word: windows. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lohndcresxzawe.z5.web.core.windows.net/

Page Load Overview

4.86s
Total Load Time
5
HTTP Requests
3
Domains
376 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:328 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media91% confidence
Type: static
Method: ml+structural

All Detected Categories

entertainment media
91%
social media network
54%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
545.57.91.1United States
AS40027NETFLIX-ASN
020.209.101.73United States
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
0195.181.170.18Frankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
045.57.90.1United States
AS40027NETFLIX-ASN
02a02:6ea0:c700::101Frankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
0212.102.56.178Frankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
037.19.194.80Frankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
0195.181.170.19Frankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
02a00:86c0:2091::1United States
AS40027NETFLIX-ASN
02a02:6ea0:c77a::47Frankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
518--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A8F1C54573F648552227D0E83AA39B492A71C10BD80EC9687BAC568C1FD6C958DE37CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:BarqdqNZ1gTBk2D+VXLiginTkJ5YW8fNIWgYiAN:BeptgT2XLigiwvYB16Yp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7602:AEBVACQwpnHNE4JnqEMJpmkENIBMuCIA8GAoCNAlFyjiF7AC1BhGmSKJtEKLAgRCEAACCAAQACSSqqF4KAzjECUkT1DXAk3T

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff439e1ac6470300
Perceptual Hash:b4882ba55a9d9c5e
Difference Hash:369734549c8e360d
Wavelet Hash:ff431e5fc7470300
Color Hash:#3a5c78

Other Hashes

Crop Resistant:369634549c8e360c

Scan History

Scan history not available

Unable to load historical scan data