ScanMalware.com

Security Scan Report: myaccount-microsoft365.com

Submitted: Sep 22, 2026, 8:42:33 PMCompleted: Sep 22, 2026, 8:43:11 PMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 88%

5
Risk Score

0-day domain impersonating Microsoft 365 with a CAPTCHA cloaking gate and redirect funnel — classic phishing infrastructure. Do not enter credentials; report it.

Risk Factors (5)
Deceptive hostname impersonating Microsoft 365 on a non-Microsoft domain
Domain registered 0 days ago with no reputation history
CAPTCHA/bot-filter interstitial used to cloak the real destination from security scanners
Unranked in Cisco Umbrella top 1M
Email/username capture field present on a brand-look-alike domain
Safety Factors (5)
No YARA malware patterns detected
No Indicators of Compromise matched against the page or its resources
No network IDS alerts
No cross-origin credential exfiltration detected in this capture
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 9 to 5
Domain age information unavailable

Details

Page Title

Human Verification

Scan Type

public

Domain Name Analysis

Domain 'myaccount-microsoft365.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'myaccount-microsoft365' stretches across 22 characters containing 6 vowels alongside twelve consonants, plus three digits and one hyphen. Word splitting yields four words: my, account, microsoft, 365. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://myaccount-microsoft365.com

Page Load Overview

2.87s
Total Load Time
100 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:219 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19114BE778D871E588F22682BA5EF2DD0311A77031AA0D4E4B4DC82C54B1E5F656E23FE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:RmowUdLkNF0e8SlWBQuMAr5HlTz9v2IUEfvns5AUxQq23y:RuUfe8SlWBQPArLTz9UwU5As2C

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:191842:noVwtQFKgIYQ1fBACKLhwwLIIXiSBAIQDFAoCLMQWQDggSETyhBCKBKPjClcQNUcl2hY0QALBj1rwSgBtRBMBQ5hgRBUAcMF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000393f3f3f373f
Perceptual Hash:875174765372d989
Difference Hash:88e4f2ebebe6e6e6
Wavelet Hash:00003b3b3f3f3737
Color Hash:#1f4293

Other Hashes

Crop Resistant:88e4f2ebebe6e6e6

Scan History

Scan history not available

Unable to load historical scan data