Security Scan Report: msoid.alpacasrl.it

Redirected to: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639032692282398318.ZTQ3MjU3ZDItMTk3Yi00YWY1LTg3NDYtOGRjNmEwY2E1ZmM2NTFkZDE5MTctYzRiOS00ZWU2LWE5N2UtMTk3MmJkMzA3Nzgz&ui_locales=en-US&mkt=en-US&client-request-id=3ad5e049-8499-481b-8489-2ae78cf9940b&state=HE2rvUcmAQYF_KMKOuUp18tvCYBr6_CIEf9lhDY4vHQBMXOPfY6XTmMd3LaiRaIMkvcmDQ08pUy-BNWC2F-SQwvUaQyof0CPe6gBth1CIYyFcVxlhIBwSCgmElZ9cyKtNbHstnn8ifHWj8tUHzj5TWophawZgbrDjAqu_GdMR43ERqs3T2vHqGCgzn6VVJ2lEQZIdx1y-uFRe4ehRLlxSynCmyPDvKu5EA1Lk-r_lf-_b5_y1vxMN6o2rcl5QnNg9blXbT3icGl-zTL_jGEyGU_cIJ4oAirgnlPfr1gVqqI&x-client-SKU=ID_NET8_0&x-client-ver=8.5.0.0&sso_reload=true

Site favicon
Submitted: Jan 6, 2026, 4:06:57 AMCompleted: Jan 6, 2026, 4:08:28 AMpubliccompleted
Loading additional data...

Summary

This website contacted 11 IPs in 4 countries across 7 domains to perform 43 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://msoid.alpacasrl.it

Effective URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639032692282398318.ZTQ3MjU3ZDItMTk3Yi00YWY1LTg3NDYtOGRjNmEwY2E1ZmM2NTFkZDE5MTctYzRiOS00ZWU2LWE5N2UtMTk3MmJkMzA3Nzgz&ui_locales=en-US&mkt=en-US&client-request-id=3ad5e049-8499-481b-8489-2ae78cf9940b&state=HE2rvUcmAQYF_KMKOuUp18tvCYBr6_CIEf9lhDY4vHQBMXOPfY6XTmMd3LaiRaIMkvcmDQ08pUy-BNWC2F-SQwvUaQyof0CPe6gBth1CIYyFcVxlhIBwSCgmElZ9cyKtNbHstnn8ifHWj8tUHzj5TWophawZgbrDjAqu_GdMR43ERqs3T2vHqGCgzn6VVJ2lEQZIdx1y-uFRe4ehRLlxSynCmyPDvKu5EA1Lk-r_lf-_b5_y1vxMN6o2rcl5QnNg9blXbT3icGl-zTL_jGEyGU_cIJ4oAirgnlPfr1gVqqI&x-client-SKU=ID_NET8_0&x-client-ver=8.5.0.0&sso_reload=trueRedirected

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Phishing page impersonating Microsoft on an unranked domain; high risk.

Risk Factors
Brand impersonation on an unranked domain
Credential harvesting form (email + password)
Mismatched domain vs displayed brand
Redirect chain that hides the true destination
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(85%)

Domain Information

You're looking at domain 'msoid.alpacasrl.it' on the Italian country-code top-level domain (.it) with subdomain 'msoid'. Count 9 characters in 'alpacasrl' holding three vowels versus six consonants. It segments into two words: alpacas, rl. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://msoid.alpacasrl.it

Page Load Overview

16.25s
Total Load Time
13
HTTP Requests
6
Domains
294 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:133 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software85% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
85%
social media network
40%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
340.126.31.0Sweden
140.126.31.71Germany
113.107.246.44France
120.190.159.68United StatesUnknown
120.50.80.214UnknownUnknown
120.190.159.129UnknownUnknown
113.69.116.108UnknownUnknown
123.36.163.106UnknownUnknown
140.126.31.1UnknownUnknown
123.36.163.107UnknownUnknown
1311--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T153836BD97EA329378A4941B5B5757E029E3A8A039C8CCD60F18CCE882FFB79C4427553

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:jcQF8GLGGiKIhxX1X9Ms1jezzTEyqU6MVnvnaloMPt3Efii498IC:QQF8zhxXPDemyS2C+IC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:86902:AiCBgoEAAZJQiADAyEw2rAgCLJU4DBI0lOBhBGmFgQBGQAXUqFA5gkMCaIDgceGCIY5aiICUoCREAgcDgREgIRARApGdZEiR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0010393b373f373f
Perceptual Hash:845971764699d96e
Difference Hash:88e4d2d3e5e6e6e6
Wavelet Hash:00003b3b373f373f
Color Hash:#2d865e

Other Hashes

Crop Resistant:88e4d2d3e5e6e6e6

Scan History

Scan history not available

Unable to load historical scan data