Report Overview

  1. Visited public
    2025-05-19 14:06:27
    Submit Tags
  2. URL

    t.infomail.microsoft.com/r/?id=hb2587504,57274842,57274848&e=b2NpZD1jbW1qNmxlN2s1bg&s=v76RfHJGvW42MQSvfHcRWtDWkSSe2-Yew18Xc9_3mFg

  3. Finishing URL

    login.live.com/login.srf?wa=wsignin1%2E0&rpsnv=175&ct=1747663565&rver=7%2E5%2E2146%2E0&wp=MBI%5FSSL&wreply=https%3A%2F%2Fonedrive%2Elive%2Ecom%2F%5Fforms%2Fdefault%2Easpx%3Fapr%3D1&lc=1033&id=250206&guests=1&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&aadredir=1

  4. IP / ASN
    20.97.219.252

    #8075 MICROSOFT-CORP-MSN-AS-BLOCK

    Title
    Sign in
  5. Suspicious - Anti-debugging code

Detections
urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
browser.events.data.microsoft.com2901991-05-022018-05-252025-05-15
t.infomail.microsoft.comunknown1991-05-022021-11-102025-04-30
onedrive.live.com22511994-12-282014-02-192025-05-15
logincdn.msauth.net23302018-10-252019-04-232025-05-14
login.live.com791994-12-282012-05-212025-05-15
fpt.live.com586931994-12-282017-01-312025-05-17
df.cfp.microsoft.comunknown1991-05-022025-02-062025-05-17

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (15)

HTTP Transactions (13)

URLIPResponseSize
GET logincdn.msauth.net/shared/5/images/fluent_web_light_57fee22710b04cebe1d5.svg
13.107.246.53200 OK44 kB
POST login.live.com/GetExperimentAssignments.srf
40.126.53.18200 OK227 B
GET fpt.live.com/Images/Clear.PNG?ctx=jscb1.0&session_id=a192d83853554038b6e4cd271edf4ae8&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&esi=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&eci=eyJ1dmRyIjoiTWVzYSIsInVyZHIiOiJsbHZtcGlwZSIsInZkciI6Ik1vemlsbGEiLCJyZHIiOiJsbHZtcGlwZSIsImlkdWgiOiJmYzk5ZmY3ZjQ5OTEzMTRlMzBiODY5MzM0N2YyZWJmZCJ9&PageId=SI
52.167.30.171200 OK6 B
GET df.cfp.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&session_id=a192d83853554038b6e4cd271edf4ae8&id=e00a8657-4df2-9b54-c73b-48a336ceac77&w=8DD96DE4CD5D024&tkt=taBcrIH61PuCVH7eNCyH0F58uBDuZFZOunQHZt3FuglwWjgNqfnfwVSh%252bPx6Ap0SsniA26Ul89oxe0cgUzoR8rQ%252fwasL7C6%252bnHzqYpX0YHIxruvT%252fr6JowAOzobWtokcphfJuyzoa28gD3zFCVdeeORZwSRYwpc%252brMJGSjgEu%252bNtMjGhtDmyFFiXigNWZy2xlCtonX5ptDIHHbk3BZSHhrpSo9w4wLkAOzC4n6R2xSTOngSlCfD6O%252fRC8A3IccmqfrgpJn3OBZ4ttso2q1v%252fiw1fak%252f27yEJ2r5ET0FEMlwNJUrSttMopN29wp6Ppcro&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d
52.167.30.171200 OK2.3 kB
OPTIONS browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
52.182.143.213200 OK0 B
GET t.infomail.microsoft.com/r/?id=hb2587504,57274842,57274848&e=b2NpZD1jbW1qNmxlN2s1bg&s=v76RfHJGvW42MQSvfHcRWtDWkSSe2-Yew18Xc9_3mFg
20.97.219.252302 Found30 kB
GET login.live.com/login.srf?wa=wsignin1%2E0&rpsnv=175&ct=1747663565&rver=7%2E5%2E2146%2E0&wp=MBI%5FSSL&wreply=https%3A%2F%2Fonedrive%2Elive%2Ecom%2F%5Fforms%2Fdefault%2Easpx%3Fapr%3D1&lc=1033&id=250206&guests=1&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&aadredir=1
40.126.53.18200 OK30 kB
GET logincdn.msauth.net/shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js
13.107.246.53200 OK91 kB
GET logincdn.msauth.net/16.000.30619.6/images/favicon.ico
13.107.246.53200 OK17 kB
POST browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
52.182.143.213200 OK153 B
GET onedrive.live.com/?CLRTags=c_udf~$~Mod1Link1~$$~c_cmp~$~EmailCard~$$~c_type~$~TextHyperlink~$$~c_pos~$~3A_~_CLRTags_~_&ocid=cmmj6le7k5n
13.107.137.11302 Found30 kB
GET logincdn.msauth.net/shared/5/js/login-fluent_en_yNTNpDyuLV2GSSromdPgmA2.js
13.107.246.53200 OK1.9 MB
GET fpt.live.com/?session_id=a192d83853554038b6e4cd271edf4ae8&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI
52.167.30.171200 OK24 kB