Scan report · 12 days agoPublic
Verdict

Dangerous — confirmed threat

Confirmed

Its page title claims to be Microsoft, which this address is not associated with. It asks you to enter a password. We found strong evidence that this site is malicious — for example a phishing page, a scam, or hostile code. Treat anything it asked for (passwords, card details, codes) as exposed.

What to do

Do not enter any information or download anything. If you already did, change those passwords now and contact your bank if payment details were involved. Block or report the link to your team.

This reflects the evidence found at the time of the scan. If you believe it is a mistake, you can escalate it for analyst review.

Findings

Strongest first
InfoBrand impersonation detected
Microsoft · medium · logo shown, brand named only in body text

The page DISPLAYS a known brand's logo while carrying almost no content of its own — no article, no navigation, nothing the brand's own site would have.

Analyst noteThe brand is in the page's images, not just its words, and the page has nothing else on it. Check what the page is asking the visitor to do.

File

The file was not analysed, so the scan carries no verdict on the file itself.

Infrastructure

IP
188.114.97.1CLOUDFLARENET - Cloudflare, Inc., US · AS13335US
TLS
CN=WE1, O=Google Trust Services, C=US · expires Dec 7, 2026
50 malicious18 suspicious

Hashes & fingerprints

Analyst reviewMalicious· 10 days ago

Analyst indicators

Brand cloneCredential Theft

Reviewed by—

Page capture

Live

Title “web-server Secure Portal” · brand shown: Microsoft (medium)

Engines

7 · time to verdict

Page

HTTP
200 · Completed
Title
web-server Secure Portal
Load
9.40 s · 14 requests
Stack · 6CloudflareHTTP/3Next.jsPriority HintsReactWebpack