Scan report · about 2 months agoPublic

account.xiaomi.com

20.47.97.75AS8069 · US

Submittedhttps://account.xiaomi.com/pass/serviceLogin

Landed onhttps://account.xiaomi.com/fe/service/login/password?sid=passport&qs=%253Fsid%253Dpassport&callback=https%3A%2F%2Faccount.xiaomi.com&_sign=2%26V1_passport%26wqS4omyjALxMm%2F%2F3wLXcVcITjEc%3D&serviceParam=%7B%22checkSafePhone%22%3Afalse%2C%22checkSafeAddress%22%3Afalse%2C%22lsrp_score%22%3A0.0%7D&showActiveX=false&theme=&needTheme=false&bizDeviceType=&_locale=en_US· 2 redirects

Verdict

0 of 7 enginesCleanAutomated

Own this site?

Looks safe

Automated

It asks you to enter a password. Our automated checks did not find known threat signals on this site at the time of the scan.

What to do

No action needed. Stay alert as usual — a clean result reflects this scan only, and sites can change after they are checked.

A clean result means no known threat signals were found in this scan — it is not an absolute guarantee, and a site can change after it is checked.

Findings

Strongest first

InfoBrand impersonation detected

Google · low

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteLow/medium confidence (keyword only) — can be a news article or partner page. Corroborate before acting.

InfoCross-domain scripts injected at runtime

34 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP: 20.47.97.75MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation, US · AS8069US
TLS: CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US · expires Sep 16, 2026
Redirects: 2 hops · /pass/serviceLogin → /fe/service/login/password?s…izDeviceType=&_locale=en_US

WHOIS

Registrar: eName Technology Co., Ltd.
Created: Jul 22, 2003
Expires: Jul 22, 2027
Nameservers: ns3.dnsv5.comns4.dnsv5.com

6 malicious4 suspicious

Hashes & fingerprints

Page Hashcb75f1f30e3f40459467e112a24d428fe1c2b78314067dbf893d3a65af9ded89 Favicon Hashf79cff37fbcdd2b9511f377165c19b9181b46b30f75c873ac03d8247afa887d1 DOM Hash6842596458cfb2eb4ca25924150165166a8c9feb141ebd303cd4abf5112fb48c Screenshot pHash85151164fefaec8c JARM13d13d00013d13d22c13d13d13d13dc3ee2cba862922a0de4d047780531a27 JA4X2166164053c1_7022c563de38_54872e220c05 Cert Thumbprint7FD66B3A53417236A67153412065A86E3866959E Cert IssuerCN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Page capture

Live

Title “Xiaomi Account - Sign in” · brand shown: Google (low)

Visit Site

Engines

7 · time to verdict