Security Scan Report: allservicerents.com

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 2 domains to perform 9 HTTP transactions. The main domain is allservicerents.com and was registered 17 years ago.

Submitted URL: https://allservicerents.com/wp-content/semarck.html

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Compromised WordPress site hosting a Microsoft-branded phishing page that exfiltrates credentials/codes to panel.thinkdifferentfx.icu. Confirmed credential phishing — do not interact.

Risk Factors (5)
Brand impersonation of Microsoft on an unrelated, non-Microsoft domain
Credential exfiltration via JavaScript to panel.thinkdifferentfx.icu
Compromised WordPress site abuse (/wp-content/ path hosting the phishing page)
Device-code / OAuth verification-code phishing flow to hijack Microsoft accounts
Threat-intel phishing report on the primary domain and IDS alerts for the .icu exfiltration host
Domain age information unavailable

Details

Page Title

Microsoft Security - Verify Your Identity

Scan Type

public

Domain Name Analysis

The domain 'allservicerents.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'allservicerents' stretches across 15 characters holding 5 vowels versus 10 consonants. It segments into three words: all, service, rents. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://allservicerents.com/wp-content/semarck.html

Page Load Overview

1.03s
Total Load Time
26 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,018 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
572.167.224.85Ashburn, Virginia, United States
AS398101GoDaddy.com, LLC
4192.109.139.67Edison, New Jersey, United States
AS135392MillenialHost Limited
92--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1513422930B42172D618904F19104326F10E2DA2B206E51EEFEDF7DAAEF7E951D8A57F0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:5lFQR9ZFHpF4BFvdR9QpyffF3eMGk4zOScwep2EahoZlNcoJ1PECVHypdpdpYp0P:gs3np/cabjt7O2WOHXnRo3WEwBUQLO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:237432:WSQkIIhNG4CkIoQBgU3KaKMc1JIg2BQqAiPAgDaISRGQSkpBUEEklaGCxArBEAKUrUwCzYQyBKoIBEAQkmYASE2EAUKLhBFG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00043c24243c1800
Perceptual Hash:93336c8c336cce66
Difference Hash:14282848082a2004
Wavelet Hash:000c3c24efffc3c3
Color Hash:#d279cc

Other Hashes

Crop Resistant:14282848082a2004

Scan History

Scan history not available

Unable to load historical scan data