Security Scan Report: msoid.zoochic-eu.ru

Redirected to:
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_...
Site favicon
Submitted: Oct 12, 2026, 6:07:02 PMCompleted: Oct 12, 2026, 6:07:35 PMpubliccompleted

This website contacted 14 IPs in 4 countries across 6 domains to perform 23 HTTP transactions. The main domain is login.microsoftonline.com and was registered 27 years ago.

Submitted URL: https://msoid.zoochic-eu.ru

Effective URL:

https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_...
Redirected

AI Security Verdict

Low Risk

Confidence: 62%

2
Risk Score

Deceptive 'msoid' .ru hostname redirects users to the genuine Microsoft login page; the served content is real Microsoft, but the lure host is likely phishing infrastructure. Entry via this link should be treated with suspicion.

Risk Factors (3)
Deceptive hostname: 'msoid' subdomain on zoochic-eu.ru mimics Microsoft online-identity naming while not being a Microsoft domain
Entry domain is unranked in Cisco Umbrella and unrelated to the brand it visually evokes
Opaque cross-domain redirect that hides the true destination from the user before landing on a login page
Safety Factors (5)
Final content is served from Microsoft's official domain login.microsoftonline.com with genuine Microsoft form handling
Credential form posts same-brand to login.microsoftonline.com; no cross-origin/cross-brand exfiltration detected
No Indicators of Compromise, no JavaScript malware patterns, no known phishing kit in roster
Cross-origin script host is Microsoft telemetry (eu-mobile.events.data.microsoft.com) and the OAuth client_id/redirect_uri match Microsoft's own Office flow
Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 5 to 2
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Domain Name Analysis

The domain 'msoid.zoochic-eu.ru' uses the Russian country-code top-level domain (.ru) and includes subdomain 'msoid'. Its registrable label 'zoochic-eu' stretches across 10 characters containing five vowels alongside 4 consonants, along with one hyphen. Word splitting yields 3 words: zoo, chic, eu. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://msoid.zoochic-eu.ru

Page Load Overview

1.15s
Total Load Time
495 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:196 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software65% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
65%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1040.126.32.140Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
120.190.159.129Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
123.103.241.45Azure · CLOUDFrankfurt am Main, Hesse, Germany
AS8075Microsoft Corporation
120.190.160.17Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
113.107.246.44Azure · CLOUDUnited States
AS8075Microsoft Corporation
14.207.44.68Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
140.126.32.134Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
123.103.241.68Azure · CLOUDFrankfurt am Main, Hesse, Germany
AS8075Microsoft Corporation
140.126.31.69Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
140.126.31.0Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
2314--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C1935CE6BFD71E37818A85F4A4B57E02AA3A4E53594CCCA4F18C8C480FFB7590167A47

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:lcpJ1q8GLG2EnCjYUHo5ZaRkpXH07WcOTIZ9Tjuokmap5vPoMLufY0f4zklC:apJ1q8ijvo5wRYW5O2a/AFlC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:90429:cAACGFYKpoZUBMYggoANAZCGhCRm2CNUSAxiERYQaYAIiEAADVDAJckMwAGQoCAHawHQASAaAuUABBGhFPgHJYiESSAAnyii

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018393b3f3f3737
Perceptual Hash:8d5976734462d92b
Difference Hash:88f2f2f3f3dae6e6
Wavelet Hash:0018383b3f3f3737
Color Hash:#77862d

Other Hashes

Crop Resistant:88f2f2f3f3dae6e6

Scan History

Scan history not available

Unable to load historical scan data