Security Scan Report: help.llbean.com

Redirected to:
https://login.microsoftonline.com/c9dca46c-3aac-42fa-bd2a-82b27c3b1a5a...
Site favicon
Submitted: Jul 24, 2026, 4:18:48 PMCompleted: Jul 24, 2026, 4:19:59 PMpubliccompleted
Loading additional data...

Summary

This website contacted 6 IPs in 1 country across 2 domains to perform 12 HTTP transactions. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://help.llbean.com

Effective URL: https://login.microsoftonline.com/c9dca46c-3aac-42fa-bd2a-82b27c3b1a5a/saml2?SAMLRequest=rZJRb5swFIX%2fCvK7IRgTwEoiJa26Veq0qKF72Au6GKe1BjbzNe367wekzTpNytMefe%2b59vnO9Qqha3uxHfyTuVc%2fB4U%2b%2bNW1BsXUWJPBGWEBNQoDnULhpThsv9wJFi4EICrntTUkuL1ek0olRZznPKFF3WSUN7CgkBQNBVlw2RR5HquGBN%2bUw3FmTcYrxkHEQd0a9GD8WFqwJV1klPEyXoo4F2kaMs4LlqTfSXA9mtMG%2fDz95H2PIopa%2b6hN2GnpLNqjt6bVRoXSdpEsGgl8KWkCIClnR6B1w4DmrGaZTOoYUogmSkaCG%2bukmkNYkyO0qCZn%2bxFQP6tzZe%2bst9K2O20abR4vh1OfRCg%2bl%2bWe7r8eShJs3wO7sgaHTrmDcs9aqof7uz9AvuudbThP02WWZ9r4sGbyRDlR%2fdu25kw%2fK3bsqoq31cP4VlW6Af2NG929WPdjB6hm4j5CtNF5f%2fLNDvmw%2bv4yXv%2bWBdmsJrWY9%2bimHDvwl0enim7ocZYKZbz2r2Tzv%2fE%2fgVcv8FpNzKvog8fN6fT3n9%2f8Bg%3d%3d&RelayState=StateProperties%3deyJUSUQiOiI0NGIzNmY1ZS0zYzNmLTQ2MzctYmVhOS1hNTcyZGQ2MmQ1ZmYifQ&SigAlg=http%3a%2f%2fwww.w3.org%2f2001%2f04%2fxmldsig-more%23rsa-sha256&Signature=bPMWomvHc4VQKqLxTAN3N8yj9P7T2kZ8komCzy0L2BuPTuPLCVPv9qdGh%2bQcskycPzGTNG3m3gm67e2hUy9a2xISO65PcisvqHCa1h2T4XUuEvDBta5TI%2bhQZEYjwRj9oUzTuYScMkTQqP7Aqxuz4AzU9NjBcrSENdbMPnVanUQWpGKp8ljwJTO6OHQNAzfRYExiS0d1LUSubKIWIdzlJLyKKf9z3DK30icuYPe8nNSKnY4GTGRazvrGPcOfuMhxu9vcAnubby0aLyLH6c6ttcaq6gRNWZttibcl8P2tjlHteXfaE6civs56l0CvstoxcIo44P65DgkoCz8f5tQzng%3d%3d&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #50,727 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

2
Risk Score

The page is a legitimate Microsoft SSO login for llbean.com with no malicious indicators.

Risk Factors
JavaScript obfuscation score marked CRITICAL (high entropy/minification)
Use of eval() in page script
Safety Factors
Established domain age (8780 days)
Brand matches its own domain (self‑branding)
Phone number and contact information displayed
Legitimate Microsoft SSO endpoint
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(64%)

Domain Information

The domain 'help.llbean.com' uses the commercial generic top-level domain (.com) with subdomain 'help'. Its registrable label 'llbean' stretches across 6 characters holding 2 vowels versus four consonants. Segmentation suggests two words: ll, bean. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://help.llbean.com

Page Load Overview

1.32s
Total Load Time
12
HTTP Requests
2
Domains
18 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:246 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software64% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
64%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
218.245.46.7Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
244.245.242.114Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
218.245.46.59Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
244.230.34.224Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
218.245.46.77Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
218.245.46.31Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
126--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10F835AD57FA6293B878A45B1B47A7E02AE3A59078C4CCD60F15CC9C42FFA64C9233563

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:DZYZ8GLG2bJWUgRUC7IH/AoiIZ9Tjuokmap5vPoMLuBn+0SiiBNC:1YZ8BUg2fAKa/Az+C

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:82449:KkKIBQcrgyGIBZIiBwwTwKAIgHQIgEc0iUQbTCEnADhAxoYHABAOAAKFqBNiCAMhEAxhxIDAUlUEEAsOVgZbAAMNZQ4YB4hJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0010393327273737
Perceptual Hash:8659597666c8993b
Difference Hash:88e4d2e7cdcee6e6
Wavelet Hash:00303b33273f373f
Color Hash:#6ce089

Other Hashes

Crop Resistant:88e4d2e7cdcee6e6

Scan History

Scan history not available

Unable to load historical scan data