urlquery Phishing - Microsoft
VerdictPhishing
Severitymedium
WEBSITE ANALYSIS REPORT
https://integrativemind.es/AuUsVn
public
Phishing detected
Review evidence →3 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://integrativemind.es/AuUsVn
- Submitted IP / ASN
104.21.78.109 AS13335 · CLOUDFLARENET
- Final URL
- https://login.integrativemind.es/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639197237113362338.OTJhYjI4MDYtZWFiNC00Y2FjLTk1NjYtZjU4M2VmMTRmNmMxODA5MTgwZDUtODM5OS00ZGY5LWFkN2MtNWY5NDQ5NGVmMmE3&ui_locales=en-US&mkt=en-US&client-request-id=b0e720c8-4849-4066-9a3b-9f495e32766a&state=IgHGJlSPOI7XTiMXzfd7jCIipb_ab2J_P9a_6fH3zC5TJu31iSC7ZHglKjvy0hPM5O3CJEB97GAlq6jghbssMMp3kWlkYhGNclZ0YaUFLHi7AwRvpiSG5VHuKHqry0CP5xn33puVFSMdJp7S0lEQWojkJIwz8l4isEUWxgm2LCgTqYOaPpYIXHweW_cnQovLcEky4gMSeNJ5PZwPs9YYXASpx3Dt0FfznptY_9Ev--bWJ6XI3T3Ircez0GqgPXA5dr96L1DbQaz8KxSsOl6mI-CIriYQjQLxFwAw13N4Z1cBBFMbPV_vyFtAOBnnHNmfbcmFrgYO8PyJtRfItwv41Cy1LJ-hCbu6NRaT9a9DNs_Mf1ZA19hF0BKe7QznuaUTPM21h6difcrmlZj_KijvVXa11mh9GoOUx10-MwKp4pI&x-client-SKU=ID_NET8_0&x-client-ver=8.14.0.0
- Final IP / ASN
- 172.67.220.98 AS13335 · CLOUDFLARENET
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 93.8 KB (96001 bytes)
Detections
Activity
- HTTP requests
- 24
- Observed hosts
- 7
- Script records
- 182
Estimated HTTP data
- Sent
- ~25.7 KB
- Received
- ~2.06 MB
Page capture
Final browser state
login.integrativemind.es
Screenshot unavailableNo screenshot pixels areavailable for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
2urlquery Phishing - Evilginx MitM Proxy
VerdictPhishing
Severityhigh
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| aadcdn.msftauth.net | 5262 | 2018-10-25 | 2018-11-19 | 2026-07-13 | 535 B | 465.7 KB |  23.73.4.10 | |
| react.integrativemind.es 1 alerts | N/A | N/A | N/A | N/A | 577 B | 2.8 KB | 172.67.220.98 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| vn3hg.integrativemind.es 16 alerts | N/A | N/A | 2026-07-15 | 2026-07-15 | 9.5 KB | 1.54 MB | 104.21.78.109 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. |
| ywnjb.integrativemind.es 1 alerts | N/A | N/A | 2026-07-15 | 2026-07-15 | 626 B | 4.5 KB | 172.67.220.98 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| browser.events.data.microsoft.com | 380 | 1991-05-02 | 2018-05-25 | 2026-07-09 | 768 B | 610 B |  40.79.163.154 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. |
| integrativemind.es 1 alerts | N/A | N/A | 2026-07-15 | 2026-07-15 | 493 B | 764 B | 172.67.220.98 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| login.integrativemind.es 6 alerts | N/A | N/A | 2026-07-15 | 2026-07-15 | 6.2 KB | 62.6 KB | 172.67.220.98 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |