Security Scan Report: msoid.uk.aswatson.com

Redirected to: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639038653453129113.YWJlZDFiMTMtMjI4NS00OGIxLTg4ZDQtNDY4YzEwYTNjZjJlMDg4NDA5YjEtY2U3Yi00YjUxLTk0OTItM2Q5NzUyNjRjNzZm&ui_locales=en-US&mkt=en-US&client-request-id=7e4f0e09-e2ec-44a8-9615-435dd1a48d32&state=S2ULfvyc_PEwd7ncsOb_egnJ3LCFASuYmFfvYsVTNL_CvWck2Rc_wzRP6q9LSO9UlpBhBrrsDNFm2O9HZEZQ03QFlIP3mUsv8rqzk5-Inzm67LzsaRfYa6yvtBaKGApgIZnWd1w6IiWbfYaE-BpoJ5dpDKMkGjVT6GjC11pIG7nTIRqPyKCSeH8ujAb4bnoio0rKIKOU_0xiOt0fwUOcfh68kJ7GQ3Ig3V2ck4dmor3xtQX3xE-jWlR-NFNMmSXSsHax6MZKVRNwfjZtCDoNTtQF3SccWW-zlebIM3EhMwU&x-client-SKU=ID_NET8_0&x-client-ver=8.5.0.0&sso_reload=true

Site favicon
Submitted: Jan 13, 2026, 1:42:20 AMCompleted: Jan 13, 2026, 1:43:37 AMpubliccompleted
Loading additional data...

Summary

This website contacted 7 IPs in 4 countries across 7 domains to perform 44 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://msoid.uk.aswatson.com

Effective URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639038653453129113.YWJlZDFiMTMtMjI4NS00OGIxLTg4ZDQtNDY4YzEwYTNjZjJlMDg4NDA5YjEtY2U3Yi00YjUxLTk0OTItM2Q5NzUyNjRjNzZm&ui_locales=en-US&mkt=en-US&client-request-id=7e4f0e09-e2ec-44a8-9615-435dd1a48d32&state=S2ULfvyc_PEwd7ncsOb_egnJ3LCFASuYmFfvYsVTNL_CvWck2Rc_wzRP6q9LSO9UlpBhBrrsDNFm2O9HZEZQ03QFlIP3mUsv8rqzk5-Inzm67LzsaRfYa6yvtBaKGApgIZnWd1w6IiWbfYaE-BpoJ5dpDKMkGjVT6GjC11pIG7nTIRqPyKCSeH8ujAb4bnoio0rKIKOU_0xiOt0fwUOcfh68kJ7GQ3Ig3V2ck4dmor3xtQX3xE-jWlR-NFNMmSXSsHax6MZKVRNwfjZtCDoNTtQF3SccWW-zlebIM3EhMwU&x-client-SKU=ID_NET8_0&x-client-ver=8.5.0.0&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #128,487 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 82%

7
Risk Score

Page mimics Microsoft sign‑in on a suspicious domain; likely a credential‑harvesting phishing site.

Risk Factors
Brand impersonation on an unusual, low‑ranked domain
Presence of a password field on a domain not owned by Microsoft
Low Cisco Umbrella ranking for a site claiming Microsoft identity services
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

The domain name 'msoid.uk.aswatson.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'msoid.uk'. Its registrable label 'aswatson' stretches across 8 characters holding 3 vowels versus five consonants. Segmentation suggests 2 words: as, watson. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://msoid.uk.aswatson.com

Page Load Overview

3.46s
Total Load Time
30
HTTP Requests
5
Domains
500 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:133 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6104.126.37.178Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
420.190.160.22Amsterdam, North Holland, Netherlands
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
413.69.239.73Ireland
413.107.246.44United StatesUnknown
420.190.160.132UnknownUnknown
420.190.159.129UnknownUnknown
413.107.6.156United States
AS8068MICROSOFT-CORP-MSN-AS-BLOCK
307--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10F836CC67EA71A33864A46B5B9B57E025B3A9943890CDCA4F08CCD843FFB74D9127217

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:jcm18GLGGIv6KR15NozTEyqU6MVnvnaloMPttEfii40C:Qm18vv6KRvNXyS2E0C

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:86908:ETCIcq8ACgYBBAdVAoFexL4CRNTowEEBoFYDICrgRCG7WEAEGgAiKZqAaBAkAgFQIBpEAWAwGaJgGG1cSQUoAygOqgQKnYi9

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0010393b373f373f
Perceptual Hash:845971764699d96e
Difference Hash:88e4d2d3e5e6e6e6
Wavelet Hash:00003b3b373f373f
Color Hash:#ac6c53

Other Hashes

Crop Resistant:88e4d2d3e5e6e6e6

Scan History

Scan history not available

Unable to load historical scan data