Scan report · 25 days agoPublic

watco.microsoft-notifcation.com

3.145.232.23AS16509 · US

the page presents itself as Microsoft and wears the brand's name in a host the brand does not own (microsoft-notifcation.com)

Engine tags
Verdict

What happened

Step by step, from what the scanner recorded.
Load 3.1 s · 12 requests
01 · Visitor openswatco.microsoft-notifcation.com/wa4d1737192/78b65c00e4993df…657ebf9c47f483976bd43ae6916
02 · Page shown
Loginstyled as Microsoft · high
03 · OutcomeCredential phishingA login page wearing a brand it does not own.

Be careful — warning signs found

Automated

It presents itself as Microsoft while being hosted somewhere Microsoft does not own. This site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.

What to do

Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.

"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.

Findings

Strongest first
SupportingBrand impersonation detected
Microsoft · high

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteHigh confidence: brand keywords AND a password field — classic credential phishing.

Infrastructure

IP
3.145.232.23AMAZON-02 - Amazon.com, Inc., US · AS16509US
TLS
CN=YR1, O=Let's Encrypt, C=US · expires Oct 29, 2026

WHOIS

Registrar
GoDaddy.com, LLC
Created
Jan 6, 2022
Expires
Jan 6, 2027
Nameservers
ns-1418.awsdns-49.orgns-1947.awsdns-51.co.ukns-293.awsdns-36.comns-789.awsdns-34.net
23 malicious16 suspicious

Hashes & fingerprints

Page capture

Live

Title “Login” · brand shown: Microsoft (high)

Engines

7 · time to verdict

Page

HTTP
200 · Completed
Title
Login
Load
3.07 s · 12 requests
Stack · 3Apache HTTP ServerjQueryPHP