Security Scan Report: msoid.billit.be

Redirected to:
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_...
Site favicon
Submitted: Sep 10, 2026, 8:46:36 AMCompleted: Sep 10, 2026, 8:47:50 AMpubliccompleted

This website contacted 14 IPs in 4 countries across 7 domains to perform 23 HTTP transactions. The main domain is login.microsoftonline.com and was registered 31 years ago.

Submitted URL: https://msoid.billit.be

Effective URL:

https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_...
Redirected

The Cisco Umbrella rank of the primary domain is #327,325 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 82%

2
Risk Score

This is the site's own sign-in page: the credential form submits to a host the operator controls, so the brand shown is their own rather than an impersonation of someone else.

Risk Factors
Low Umbrella ranking for a brand‑claiming site
Obfuscated JavaScript (high number of Function() calls)
Safety Factors
Form posts to legitimate Microsoft endpoint
No malicious YARA or IDS alerts detected
Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 7 to 2
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Domain Name Analysis

The domain name 'msoid.billit.be' uses the Belgian country-code top-level domain (.be); it also runs on subdomain 'msoid'. The second-level label 'billit' is 6 characters long with two vowels and four consonants. It segments into two words: bill, it. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://msoid.billit.be

Page Load Overview

1.07s
Total Load Time
494 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:196 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software66% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
66%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1020.190.160.66Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
113.107.6.156Azure · CLOUDUnited States
AS8068Microsoft Corporation
12.21.239.158Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
140.126.31.73Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
120.190.160.132Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
120.190.160.5Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
123.207.210.132Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
120.190.159.68Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
140.126.32.133Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
14.207.44.71Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
2314--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18A435CD63F883017874619F1C8BFBF0AA63A86935984CCCCF5DE88581DFD666896B103

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:jc9EE/8GLG2PsaARXPmioTIZ9Tjuokmap5vPoMLuBK:Q9EE/8msaARXno2a/Am

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:56458:GxgYJfQBUQIC0k4KRGE1RgYxwRCIAaJRAYhUxGlSwq0UQOCFEwqCwFAAWYApDABcERwC0PKAYTJgMEjiAqI0TFEdDJtKIIwN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00183933373f3737
Perceptual Hash:8559717666739989
Difference Hash:88f2d2e7e5dae6e6
Wavelet Hash:001839333f3f3737
Color Hash:#539dac

Other Hashes

Crop Resistant:88f2d2e7e5dae6e6

Scan History

Scan history not available

Unable to load historical scan data