Security Scan Report: unbh.dev.cms.unbooking.org

Redirected to:
https://login.microsoftonline.com/462ad9ae-d7d9-4206-b874-71b1e079776f...
Submitted: Apr 26, 2026, 1:40:47 PMCompleted: Apr 26, 2026, 1:41:59 PMpubliccompleted
Loading additional data...

Summary

This website contacted 6 IPs in 4 countries across 7 domains to perform 1 HTTP transaction. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://unbh.dev.cms.unbooking.org/cms-admin/

Effective URL: https://login.microsoftonline.com/462ad9ae-d7d9-4206-b874-71b1e079776f/oauth2/v2.0/authorize?client_id=604f4f67-b7b8-43c1-91a7-487454fa3b89&response_type=id_token&redirect_uri=https%3A%2F%2Funbh.dev.cms.unbooking.org%2Foidc%2Fdone%2F&state=%2Fcms-admin%2F&response_mode=form_post&nonce=ioTodzf7vz0Ftvjww16urrgM0VoKOxE0gEyumw5h&scope=openid+profile&login_hint=&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #952,937 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 85%

2
Risk Score

The site appears to be a legitimate internal SSO login page with no malicious indicators.

Risk Factors
Low Cisco Umbrella ranking (952,937) for a domain claiming a brand
Subdomain of a non‑official Microsoft domain
Safety Factors
Old, well‑established domain registration
Legitimate SSO flow to Microsoft authentication service
Hidden fields match standard Azure AD login parameters
Contact information points to a known organization (IT Service Desk)
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(28%)

Domain Information

The domain name 'unbh.dev.cms.unbooking.org' uses the non-profit oriented generic top-level domain (.org); it also runs on subdomain 'unbh.dev.cms'. Its registrable label 'unbooking' stretches across 9 characters split between four vowels and 5 consonants. Breaking it apart gives two words: un, booking. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://unbh.dev.cms.unbooking.org/cms-admin/

Page Load Overview

1.24s
Total Load Time
19
HTTP Requests
5
Domains
954 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:252 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software28% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
28%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
420.190.159.23Ireland
AS8075Microsoft Corporation
320.190.160.5Germany
AS20940Akamai International B.V.
323.207.210.132Netherlands
AS16509Amazon.com, Inc.
313.69.239.77United StatesUnknown
313.107.246.44United States
AS8075Microsoft Corporation
3108.128.234.184Dublin, Leinster, Ireland
AS16509Amazon.com, Inc.
196--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T173833CDA7EB32937824641B9B1BA6E026A765803CC4CDD64F19CCD892FFA74D8133617

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:j08k8GLG2zSWZkl7V8k5L9oIyEk77gx2xpTvPoMmCBEErB3iVdC:o8k8OSWZkl7V8EL9J32RAxdC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:82971:AEBOYUhKpMPFgCAQJgfACqAAAAwIBmDkIVlfEAA8EKAVlxCnMYdCoJlOIyYBnMNICACO8AjAuIGAlMIQFkCHwQFJKMwGoSVI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8784981818180000
Perceptual Hash:9c9b6367cc2499c9
Difference Hash:1c38323232329696
Wavelet Hash:cf8f9f9b1a9a40c0
Color Hash:#d279c1

Scan History

Scan history not available

Unable to load historical scan data