Security Report: magiconcandle.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/eb901e12-eef8-403a-bb8b-93ea7b20bf29 Domain and IP registration (RDAP)/api/v1/rdap/eb901e12-eef8-403a-bb8b-93ea7b20bf29How often this domain was scanned/api/v1/domain/stats/magiconcandle.com Scan history for this domain/api/v1/domain/history/magiconcandle.com?limit=15

This website contacted 6 IPs in 3 countries across 5 domains to perform 7 HTTP transactions. The main domain is magiconcandle.com and was registered 7 years ago.

Submitted URL: https://magiconcandle.com/hot/hotlevel.html

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Microsoft-branded credential phishing page hosted on a compromised unrelated domain, confirmed by Safe Browsing Social Engineering, a password form, and Telegram-token data exfiltration. Do not enter any credentials.

Risk Factors (6)

Microsoft brand impersonation on a non-Microsoft domain (magiconcandle.com is unranked in Cisco Umbrella top 1M)

Credential (email + password) capture form on a domain unrelated to the claimed brand

Google Safe Browsing Social Engineering detection

Telegram bot token in page script — direct exfiltration channel for captured credentials

Victim IP/geolocation lookup via ipapi.co and obfuscation-style encoding functions in inline scripts

Legitimate candle-seller domain appears compromised and repurposed to host a phishing page under /hot/

Domain age information unavailable

Details

Page Title

Security verification - Microsoft account

Scan Type

public

Favicon Hash

MMH3: 1198047028

MD5: 000bf649cc8f6bf27cfb04d1bcdcd3c7

Domain Name Analysis

The domain name 'magiconcandle.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'magiconcandle' is 13 characters long holding 5 vowels versus 8 consonants. Segmentation suggests 3 words: magic, on, candle. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

BE Microsoft Security verification Continue to account settings Falkenstein, Germany + 178,63.16.224 Email, phone, or Skype No account? Create onel Can't access your account? 6.2026 Microsof | P...

Page Load Overview

0.69s

Total Load Time

46 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:522 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software72% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

72%

documentation technical

32%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	68.66.216.59	United States	AS55293A2 Hosting, Inc.
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	23.216.155.57Akamai · CDN	Dublin, Leinster, Ireland	AS20940Akamai International B.V.
1	104.26.8.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	23.52.181.212Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
1	23.216.155.59Akamai · CDN	Dublin, Leinster, Ireland	AS20940Akamai International B.V.
7	6	-	-