Report Overview
URL
at-es-ch-uk-409889bc.azurewebsites.net
Finishing URL
at-es-ch-uk-409889bc.azurewebsites.net/
IP / ASN
20.208.5.34
Title
Sign in to your account
Phishing - Microsoft
Phishing - Microsoft Outlook
Detections
urlquery
3
Network Intrusion Detection
1
Threat Detection Systems
2
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
eu-mobile.events.data.microsoft.com | 3935 | 1991-05-02 | 2021-09-30 | 2026-02-18 | 1.6 kB | 1.7 kB |  13.69.239.68 |  |
aadcdn.msauth.net | 5248 | 2018-10-25 | 2018-11-19 | 2026-02-18 | 5.3 kB | 1.4 MB |  13.107.246.53 |  |
login.live.com | 179 | 1994-12-28 | 2012-05-21 | 2026-02-18 | 1.0 kB | 4.2 kB |  20.190.147.11 | |
at-es-ch-uk-409889bc.azurewebsites.net 4 alert(s) on this Host | unknown | 2012-01-24 | 2026-02-22 | 2026-02-22 | 507 B | 50 kB | 20.208.5.34 |
Microsoft HTTPAPI:2.0 (Web servers)
Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.Azure Front Door (Load balancers)
Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.Azure (PaaS)
Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 20.208.5.34 | ET INFO Abused Hosting Domain (azurewebsites .net) in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | at-es-ch-uk-409889bc.azurewebsites.net | malicious | Sinkholed |
| OpenDNS | at-es-ch-uk-409889bc.azurewebsites.net | phishing | Phishing Block |
JavaScript (184)
No JavaScripts
HTTP Transactions (15)
| URL | IP | Response | Size |
|---|