Security Scan Report: msoid.plus.finnair.com

Redirected to:
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_...
Site favicon
Submitted: Sep 5, 2026, 9:37:48 AMCompleted: Sep 5, 2026, 9:39:00 AMpubliccompleted

This website contacted 12 IPs in 4 countries across 5 domains to perform 22 HTTP transactions. The main domain is login.microsoftonline.com and was registered 27 years ago.

Submitted URL: https://msoid.plus.finnair.com

Effective URL:

https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_...
Redirected

The Cisco Umbrella rank of the primary domain is #182,616 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 80%

2
Risk Score

This is the site's own sign-in page: the credential form submits to a host the operator controls, so the brand shown is their own rather than an impersonation of someone else.

Risk Factors
Low‑ranking domain for a major brand
Safety Factors
No malicious JavaScript or YARA matches detected
No network IDS alerts
Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 7 to 2
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Domain Name Analysis

The domain name 'msoid.plus.finnair.com' uses the commercial generic top-level domain (.com) and includes subdomain 'msoid.plus'. Its registrable label 'finnair' stretches across 7 characters containing 3 vowels alongside 4 consonants. Splitting it apart reveals two words: finn, air. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://msoid.plus.finnair.com

Page Load Overview

3.88s
Total Load Time
490 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:196 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software66% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
66%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1140.126.32.74Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
140.126.31.2Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
113.107.6.156Azure · CLOUDUnited States
AS8068Microsoft Corporation
12.18.79.11Vienna, State of Vienna, Austria
AS20940Akamai International B.V.
140.126.32.72Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
140.126.32.140Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
120.190.160.2Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
120.190.159.4Office365 · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
120.190.159.64Office365 · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
120.190.160.3Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
2212--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T143538C963E98342B8B8765A1CC7FBF06D67D099BA884CCCCE49ED9450D7FBA50927103

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:jcTqad8GLG2dieihR3mJPTIZ9Tjuokmap5vPoMLuBK:QTqad8cieOR6P2a/Am

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:61317:CtIH1OpiBNCAximohdCFIa69kJwBSWyQ4xHkSsoQEhhoCSBAqIhU1gF2AGI4kAwA1ZUhiQFgCKWsT6hVBQqgAIkQ0AGBCWNM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00183933373f3737
Perceptual Hash:8559717666739989
Difference Hash:88f2d2e7e5dae6e6
Wavelet Hash:001839333f3f3737
Color Hash:#783a69

Other Hashes

Crop Resistant:88f2d2e7e5dae6e6

Scan History

Scan history not available

Unable to load historical scan data