Security Scan Report: nycourts.visualstudio.com

Redirected to: https://login.microsoftonline.com/3456fe92-cbd1-406d-b5a3-5364bec0a833/oauth2/authorize?client_id=499b84ac-1321-427f-aa17-267ca6975798&site_id=501454&response_mode=form_post&response_type=code+id_token&redirect_uri=https%3A%2F%2Fspsprodeus23.vssps.visualstudio.com%2F_signedin&nonce=557a4604-6965-4116-9da2-dc31d9b6a639&state=realm%3Dnycourts.visualstudio.com%26reply_to%3Dhttps%253A%252F%252Fnycourts.visualstudio.com%252F%26ht%3D2%26hid%3De03096ef-d511-4438-8d64-420542d4f06f%26nonce%3D557a4604-6965-4116-9da2-dc31d9b6a639%26lltid%3D98b28287-e51a-4c94-92af-596939ca1ec3%26protocol%3Dwsfederation&resource=499b84ac-1321-427f-aa17-267ca6975798&cid=557a4604-6965-4116-9da2-dc31d9b6a639&wsucxt=1&instance_aware=true&sso_reload=true

Submitted: Mar 29, 2026, 11:04:43 PMCompleted: Mar 29, 2026, 11:05:52 PMpubliccompleted
Loading additional data...

Summary

This website contacted 7 IPs in 3 countries across 9 domains to perform 1 HTTP transaction. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://nycourts.visualstudio.com

Effective URL: https://login.microsoftonline.com/3456fe92-cbd1-406d-b5a3-5364bec0a833/oauth2/authorize?client_id=499b84ac-1321-427f-aa17-267ca6975798&site_id=501454&response_mode=form_post&response_type=code+id_token&redirect_uri=https%3A%2F%2Fspsprodeus23.vssps.visualstudio.com%2F_signedin&nonce=557a4604-6965-4116-9da2-dc31d9b6a639&state=realm%3Dnycourts.visualstudio.com%26reply_to%3Dhttps%253A%252F%252Fnycourts.visualstudio.com%252F%26ht%3D2%26hid%3De03096ef-d511-4438-8d64-420542d4f06f%26nonce%3D557a4604-6965-4116-9da2-dc31d9b6a639%26lltid%3D98b28287-e51a-4c94-92af-596939ca1ec3%26protocol%3Dwsfederation&resource=499b84ac-1321-427f-aa17-267ca6975798&cid=557a4604-6965-4116-9da2-dc31d9b6a639&wsucxt=1&instance_aware=true&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #609 of the top 1 million websitesTop 1K Site

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Page impersonates NY Courts and collects credentials; treat as high‑risk phishing.

Risk Factors
Brand impersonation (NYCOURTS.GOV) on an unrelated domain
Credential harvesting form (email + password)
Cross‑origin credential submission to a different domain
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

social media network

(39%)

Domain Information

Domain 'nycourts.visualstudio.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'nycourts'. The second-level label 'visualstudio' is 12 characters long containing six vowels alongside 6 consonants. Segmentation suggests two words: visual, studio. The median word length lands at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nycourts.visualstudio.com

Page Load Overview

1.37s
Total Load Time
40
HTTP Requests
7
Domains
998 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:109 chars
Detector Agreement:67%

Website Classification

Primary Category

social media network39% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
39%
government public service
38%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1013.107.246.44United States
AS8075Microsoft Corporation
520.190.159.2Ireland
5150.171.73.16United States
AS8075Microsoft Corporation
523.207.210.137Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
520.42.73.31UnknownUnknown
540.126.31.131UnknownUnknown
540.126.31.73UnknownUnknown
407--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T149836DDA7EA22937C28A45B5B1B93D02AA3A5903CD4CCDA4F19CCD842FF775C9123647

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:jy8GLG2Om29RH0oIyEk77gx2xpTvPoMmC3HEIltizQC:W8/m8x0J32RA+C

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:85667:AACHBAIQSJZbFR4FbCAQQRACARTqjBwoBQRaAhJBjWWIsoCQOsBITQyIBhmqCEDBa6RAgodoAiAATkkEKgANNSkYKl5DIoIg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:8dc072278c9fd9cc
Difference Hash:d08cf272f2724cf3
Wavelet Hash:0c4c3c3c3f3f3f00
Color Hash:#79b5d2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data