urlquery Phishing - Microsoft
VerdictPhishing
Severitymedium
WEBSITE ANALYSIS REPORT
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=78ce50cb-54eb-42b2-9e79-9c71b0309da7&response_type=code&response_mode=query&scope=openid+profile+email+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&prompt=none&state=aS5zY2FuZG9sYXJhQG9jcmltLmNvq=
public
Phishing detected
Review evidence →4 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=78ce50cb-54eb-42b2-9e79-9c71b0309da7&response_type=code&response_mode=query&scope=openid+profile+email+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&prompt=none&state=aS5zY2FuZG9sYXJhQG9jcmltLmNvq=
- Submitted IP / ASN
20.190.181.0 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
- Final URL
- https://pricemacr-ent.taintariors.co.uk/?v=1#aS5zY2FuZG9sYXJhQG9jcmltLmNvq=
- Final IP / ASN
137.184.30.104 AS14061 · DIGITALOCEAN-ASN
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 1.1 KB (1104 bytes)
Detections
Activity
- HTTP requests
- 26
- Observed hosts
- 6
- Script records
- 179
Estimated HTTP data
- Sent
- ~20.8 KB
- Received
- ~1.63 MB
Page capture
Final browser state
pricemacr-ent.taintariors.co.uk
Screenshot unavailableNo screenshot pixels areavailable for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
2urlquery Phishing - Microsoft Outlook
VerdictPhishing
Severitymedium
Threat Detection Systems
1DNS4EU Sinkholed
VerdictMalicious
Severitymedium
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| login.live.com | 179 | 1994-12-28 | 2012-05-21 | 2026-04-22 | 981 B | 4.9 KB | 20.190.181.23 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| pricemacr-ent.taintariors.co.uk 18 alerts | N/A | 2026-02-11 | 2026-04-22 | 2026-04-22 | 9.9 KB | 103.4 KB | 137.184.30.104 | |
| aadcdn.msftauth.net | 5262 | 2018-10-25 | 2018-11-19 | 2026-04-20 | 5.0 KB | 1.49 MB |  95.101.10.97 | |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-04-20 | 2.2 KB | 28.5 KB | 40.126.53.19 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| solarworldbotswana.co.bw 2 alerts | N/A | 2023-08-14 | 2026-04-09 | 2026-04-20 | 1.3 KB | 3.1 KB | 192.250.227.228 | LiteSpeed Web servers LiteSpeed is a high-scalability web server. |
| portal.microsoftonline.com | 222862 | 2002-07-09 | 2014-01-23 | 2026-04-18 | 566 B | 1.8 KB | 150.171.74.13 |