[gary_0]

msbill.info's DNS points to the same IP addresses as microsoft.com, and their servers give a specific 301 response for the header "Host: msbill.info", so msbill.info is almost definitely owned and operated by Microsoft. I don't think that confirms that the charges are coming from Microsoft, though.

[amanzi]

Perhaps these are just Azure Front Door IP addresses? I don't have another site I can check, but it's possible that these IP addresses are used by lots of websites as part of the Azure infrastructure stack.

[gary_0]

I actually did a quick check and most of them didn't show up as Azure, just general MS IPv4 blocks. I would hope MS keeps its own infrastructure separate from the public Azure cloud...