Report Overview

  1. Submitted URL

    20.91.147.72

  2. IP

    20.91.147.72

    ASN

    #8075 MICROSOFT-CORP-MSN-AS-BLOCK

  3. Submitted

    2024-05-07 15:15:14

    Access

    public

  4. Website Title

    Sign in to Microsoft Azure

  5. Final URL

    login.microsoftonline.com/organizations/oauth2/v2.0/authorize?redirect_uri=https%3A%2F%2Fintune.microsoft.com%2Fsignin%2Findex%2F&response_type=code%20id_token&scope=https%3A%2F%2Fmanagement.core.windows.net%2F%2Fuser_impersonation%20openid%20email%20profile&state=OpenIdConnect.AuthenticationProperties%3Do-5z7ly4VsJyEfcD6Cm8SJZrwFO9wzQt_z1cjPhhGnRBGyYckMq2DOnVVH-M6JlNbQJtmPPIgs6igCL2XUyUF3gPE8oRoUlC8kxUY7nFjg5Iy3B8-MU0dlMDPhbemepRdNmw186OTKksvpBRQQf11Tnu8YOrJ93Kc9lcGgrnQoEAN4FRytXbn343qpIkALe8I4lDlZwUY2k7ZsEOZR9A0JlW4xgsN8Mu917HatIrxMG-TDYlUGW-xdXOrSC--_5oxxtWhSEPmZqVqBzYEVLoC2AuJDPfxRYrqJaZzg1lFHAW6y-zprrtzq9mxMnjt2hl9BLCwf_OL6zqaOnzftwoZiysQcNL6WK7JlPxHGKxzo_pXJYaJA7sXGsenWwzVTMVrNXn0c8nLbz4epzaHBBras55hHtjMOJqXYvLcAHpp_sw78nQIoKmTdNfNj_xGPO5&response_mode=form_post&nonce=638506916799682392.NmUzZTFlY2UtMGZjNi00MzEyLThjZDctZWExOTZiMTBkY2U2YTc3YzA1YzktM2E1YS00NGUyLTk5ODUtM2QwNDQxNGZhZDEw&client_id=c44b4083-3bb0-49c1-b47d-974e53cbdf3c&site_id=501430&client-request-id=cc52978b-22f4-4474-b8dd-bea7664f60e7&x-client-SKU=ID_NET472&x-client-ver=7.2.0.0

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
20.91.147.72unknownunknown2023-01-272024-05-06
intune.microsoft.comunknown1991-05-022022-10-182023-12-29
login.microsoftonline.com252002-07-092017-02-192019-07-18
aadcdn.msauth.net14212018-10-252018-11-192024-05-06
portal.azure.com11842unknownNo dataNo data

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
medium20.91.147.72Sinkholed

ThreatFox

No alerts detected


JavaScript (161)

HTTP Transactions (16)

URLIPResponseSize
20.91.147.72/
20.91.147.72 0 B
intune.microsoft.com/
13.107.213.53 19 kB
intune.microsoft.com/?bundlingKind=DefaultPartitioner&configHash=FUZZZWYR_YHr&env=intune&l=en.en-us&pageVersion=13.311.0.1281917.240426-0005
13.107.213.53 16 kB
intune.microsoft.com/signin/idpRedirect.js/?sessionId=d2c62f295701471fa896af246e4c2c27&feature.settingsportalinstance=devicemanagement&feature.showservicehealthalerts=false&feature.internalgraphapiversion=true&feature.selftoken=true&feature.globalresourcefilter=true&feature.msaljs=true&feature.testcrosscloudpuid=true&idpc=0
13.107.213.53 12 kB
login.microsoftonline.com/organizations/oauth2/v2.0/authorize?redirect_uri=https%3A%2F%2Fintune.microsoft.com%2Fsignin%2Findex%2F&response_type=code%20id_token&scope=https%3A%2F%2Fmanagement.core.windows.net%2F%2Fuser_impersonation%20openid%20email%20profile&state=OpenIdConnect.AuthenticationProperties%3Do-5z7ly4VsJyEfcD6Cm8SJZrwFO9wzQt_z1cjPhhGnRBGyYckMq2DOnVVH-M6JlNbQJtmPPIgs6igCL2XUyUF3gPE8oRoUlC8kxUY7nFjg5Iy3B8-MU0dlMDPhbemepRdNmw186OTKksvpBRQQf11Tnu8YOrJ93Kc9lcGgrnQoEAN4FRytXbn343qpIkALe8I4lDlZwUY2k7ZsEOZR9A0JlW4xgsN8Mu917HatIrxMG-TDYlUGW-xdXOrSC--_5oxxtWhSEPmZqVqBzYEVLoC2AuJDPfxRYrqJaZzg1lFHAW6y-zprrtzq9mxMnjt2hl9BLCwf_OL6zqaOnzftwoZiysQcNL6WK7JlPxHGKxzo_pXJYaJA7sXGsenWwzVTMVrNXn0c8nLbz4epzaHBBras55hHtjMOJqXYvLcAHpp_sw78nQIoKmTdNfNj_xGPO5&response_mode=form_post&nonce=638506916799682392.NmUzZTFlY2UtMGZjNi00MzEyLThjZDctZWExOTZiMTBkY2U2YTc3YzA1YzktM2E1YS00NGUyLTk5ODUtM2QwNDQxNGZhZDEw&client_id=c44b4083-3bb0-49c1-b47d-974e53cbdf3c&site_id=501430&client-request-id=cc52978b-22f4-4474-b8dd-bea7664f60e7&x-client-SKU=ID_NET472&x-client-ver=7.2.0.0
40.126.53.18200 OK16 kB
aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css
13.107.213.53200 OK20 kB
aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_il6fx5t9s506cdxfu3ywpg2.js
13.107.213.53200 OK16 kB
aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_IDwaQXicOTFiRVOQGoK9bQ2.js
13.107.213.53200 OK121 kB
aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
13.107.213.53200 OK17 kB
aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js
13.107.213.53200 OK54 kB
portal.azure.com/cobrand/
13.107.246.53200 OK8.8 kB
aadcdn.msauth.net/shared/1.0/content/images/applogos/17_51e2d36bb3f20fbd95d946074449cd54.png
13.107.213.53200 OK42 kB
aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
13.107.213.53200 OK1.4 kB
aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_ea3e62a2bdfb2b2ee8c8.js
13.107.213.53200 OK36 kB
aadcdn.msauth.net/shared/1.0/content/images/signin-github_4f133e101999f0f9f726427324505c7b.svg
13.107.213.53200 OK532 B
aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
13.107.213.53200 OK621 B