urlquery Phishing - Microsoft
VerdictPhishing
Severitymedium
WEBSITE ANALYSIS REPORT
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=78ce50cb-54eb-42b2-9e79-9c71b0309da7&response_type=code&response_mode=query&scope=openid+profile+email+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&prompt=none&state=aS5zY2FuZG9sYXJhQG9jcmltLmNvbQ==
public
Phishing detected
Review evidence →5 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=78ce50cb-54eb-42b2-9e79-9c71b0309da7&response_type=code&response_mode=query&scope=openid+profile+email+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&prompt=none&state=aS5zY2FuZG9sYXJhQG9jcmltLmNvbQ==
- Submitted IP / ASN
40.126.53.11 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
- Final URL
- https://conscince.sosinskiglobal.ru/?v=1
- Final IP / ASN
137.184.30.104 AS14061 · DIGITALOCEAN-ASN
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/plain; charset=utf-8
- Final DOM size
- 0 B (0 bytes)
Detections
Activity
- HTTP requests
- 30
- Observed hosts
- 9
- Script records
- 251
Estimated HTTP data
- Sent
- ~24.6 KB
- Received
- ~1.71 MB
Page capture
Final browser state
conscince.sosinskiglobal.ru
Screenshot unavailableNo screenshot pixels areavailable for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
2urlquery Phishing - Microsoft Outlook
VerdictPhishing
Severitymedium
Threat Detection Systems
2DNS4EU Sinkholed
VerdictMalicious
Severitymedium
CIRA Canadian Shield DNS Sinkholed
VerdictMalicious
Severitymedium
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| login.live.com | 179 | 1994-12-28 | 2012-05-21 | 2026-04-15 | 977 B | 4.9 KB |  20.190.177.149 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| solarworldbotswana.co.bw 2 alerts | N/A | 2023-08-14 | 2026-04-09 | 2026-04-20 | 1.3 KB | 3.1 KB | 192.250.227.228 | LiteSpeed Web servers LiteSpeed is a high-scalability web server. |
| autologon.microsoftazuread-sso.com | 5151 | 2016-07-22 | 2017-01-30 | 2026-04-16 | 647 B | 21.3 KB | 20.190.147.3 | jQuery JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-04-20 | 3.9 KB | 30.1 KB | 20.190.177.148 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| aadcdn.msftauth.net | 5262 | 2018-10-25 | 2018-11-19 | 2026-04-20 | 525 B | 147.6 KB | 2.22.225.32 | |
| aadcdn.msauth.net | 5248 | 2018-10-25 | 2018-11-19 | 2026-04-15 | 5.9 KB | 1.39 MB | 13.107.246.53 | Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. |
| conscince.sosinskiglobal.ru 21 alerts | N/A | N/A | N/A | N/A | 8.0 KB | 106.3 KB | 137.184.30.104 | |
| portal.microsoftonline.com | 222862 | 2002-07-09 | 2014-01-23 | 2026-04-18 | 562 B | 1.8 KB | 150.171.74.13 | |
| aadcdn.msauthimages.net | 24430 | 2018-11-12 | 2019-08-14 | 2026-04-15 | 552 B | 7.8 KB | 2.22.225.34 |