ScanMalware.com

Security Scan Report: sso-security.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/dc016913-dd7f-4a35-b227-57339538cba5Domain and IP registration (RDAP)/api/v1/rdap/dc016913-dd7f-4a35-b227-57339538cba5How often this domain was scanned/api/v1/domain/stats/sso-security.comScan history for this domain/api/v1/domain/history/sso-security.com?limit=15
This website contacted 3 IPs in 2 countries across 2 domains to perform 2 HTTP transactions. The main domain is sso-security.com and was registered 1 year 7 months ago.

Submitted URL: https://sso-security.com/E.Cq7P94af46KqmA?=userid&messageid=YWZhNDM0c2RqZjk4MjNmb2lkc2pmKC9DODk4RnNhOShGLyhBU0ZzdWlhaGRma2FzZDIoLw==

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake Microsoft sign-in page on sso-security.com harvesting credentials with a Bunge-targeted email lure. Brand impersonation plus a live password form makes this confirmed phishing.

Risk Factors (5)
Brand impersonation of Microsoft on a non-Microsoft domain
Credential (email + password) login form on an unrelated host
Targeted lure using a named employee address at ollecobunge.com
Discrepancy between legitimate support link and actual form host
Base64-encoded tracking parameter in URL path
Domain age information unavailable

Details

Page Title

Sign in to your Microsoft account

Scan Type

public

Domain Name Analysis

The domain name 'sso-security.com' uses the commercial generic top-level domain (.com). The registrable portion 'sso-security' spans 12 characters holding 4 vowels versus 7 consonants, plus 1 hyphen. It segments into 3 words: s, so, security. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

BUNGE Sign in angelique.caporizzo@ollecobunge.com Can’t access your account? ‘Terms of use Privacy & cookies

Page Load Overview

0.57s
Total Load Time
33 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:627 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software68% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
68%
documentation technical
43%
government public service
35%
adult content
32%
healthcare medical
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2212.104.128.3Cloudflare · CDNFinland
AS13335Cloudflare, Inc.
0212.104.128.2Cloudflare · CDNFinland
AS13335Cloudflare, Inc.
0146.75.121.137Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
23--

Detected Technologies4

Cloudflare Bot Management
55%
HTTP/3
40%
HSTS
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F2D3E77A4183157C8B1E783AB6EB2D003FE191034953D9A4B7EC46B48F0A9E1569D3EF

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:vxifuNadm9uwUdW5UfkGKF0qd8SlWIYOQ1rt+p2sE62eIjRnoRrsoqW/f:Ku2mowUdLkNF0e8SlWBQIGf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:137169:ECIlAlhSgoBBAOUjSqCNLSoQRHBcAhl8fRwKBfARMGiBkCCSAokGAAAYcAkBAAEgHDKlQWDjBCJACgW1pQQDk6CKR5AEG1lU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0010292f37373737
Perceptual Hash:8659506646bb5b6e
Difference Hash:88e4dadbe5e6e6e6
Wavelet Hash:00202b3b373f373f
Color Hash:N/A

Other Hashes

Crop Resistant:88e4dadbe5e6e6e6

Scan History

Scan history not available

Unable to load historical scan data