Security Scan Report: security-server-landing-page--d0cdrlve.replit.app

Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 5 domains to perform 10 HTTP transactions. The main domain is replit.app and was registered 5 years ago.

Submitted URL: https://security-server-landing-page--d0cdrlve.replit.app/forgotpassword.html

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Microsoft Outlook sign-in on a replit.app subdomain that harvests email/password to a third-party form endpoint. Primary domain flagged for phishing — do not enter credentials.

Risk Factors (6)
Microsoft/Outlook brand impersonation on a non-Microsoft domain
Credential harvesting form (email + password) — 1 password field verified in DOM
Indicators of Compromise: primary domain reported as phishing
Form data posted cross-origin to submit-form.com (third-party collection endpoint)
Victim IP collection via ipify/ipinfo on a fake login page
Hosted on a free replit.app subdomain — page age unknown, apex age not attributable
Domain age information unavailable

Details

Page Title

Sign in to Outlook

Scan Type

public

Domain Name Analysis

You're looking at domain 'security-server-landing-page--d0cdrlve.replit.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'security-server-landing-page--d0cdrlve'. Count 6 characters in 'replit' split between 2 vowels and 4 consonants. Segmentation suggests 2 words: rep, lit. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

BE Microsoft Sign in toccantinue to Outlook Email, phone,or skype Password Forgot password? / \ (tani «)

Page Load Overview

0.68s
Total Load Time
168 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:128 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network69% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
69%
technology software
67%
documentation technical
46%
phishing scam
36%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
234.117.33.233Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
213.107.246.44Azure · CLOUDUnited States
AS8075Microsoft Corporation
235.190.3.23Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2146.75.120.193Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
105--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12723EBAD73330CAEDD32641BE9467780F2044F83F48AB82475EC15182FA9D7AD5527AB

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:P6I3XtPEj8cz4v6hVkApT5AtnVzqjzI0w6xrAkCz+lP/QTVvE0NcpUL:P6EXukApT5AtnVzqPI0woQTVvECcpA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:47047:IxQKIBoKSFIYzo2rHJBwUDtBKANAgYAgMVTxANEloIwEokABCsywQgREhwUhweQMhOAQTDD0xUBgRGC0WJAsEAUbRzkg8YAW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0438397337377776
Perceptual Hash:847b55a2562676ab
Difference Hash:88d2f2e5e7e5cfe6
Wavelet Hash:0038387337377776
Color Hash:N/A

Other Hashes

Crop Resistant:88d2f2e5e7e5cfe6

Scan History

Scan history not available

Unable to load historical scan data