Report Overview
Visitedpublic
2026-08-13 09:31:45
Submit Tags
URL
sharepoint3883-4388eral-a8qi.bolt.host/common/oauth2/v2.0/authorize
Finishing URL
sharepoint3883-4388eral-a8qi.bolt.host/common/oauth2/v2.0/authorize?client_id=a76f5b22-b0f9-4d89-8cb6-d144b1ca0caa&redirect_uri=https%253A%252F%252Foutlook.office.com%252Fmail%252F&response_type=code%2Bid_token&response_mode=form_post&scope=https%253A%252F%252Foutlook.office.com%252F.default%2520openid%2520profile&state=PTLh6kphyMVwFWSaLzagBZuZPApJfWE8&nonce=MAUTXMyAcPeCggejLatYpXaVHenICjnF&code_challenge=a7Rdg7UuKnMKPmWwkRsskXHh6LAwzeD2AWQP2g51hmr&code_challenge_method=S256&prompt=login&login_hint=&domain_hint=&sso_reload=true&client_info=1&x_client_ver=1.0.0&x_client_sku=MSAL.JS&x_client_cpu=x64&x_client_os=Windows&x_client_dm=1&x_ms_lib_ver=2.0.0&session_id=3cf2ac05-eb3a-44ab-90a2-811563fc486b&correlation_id=efd4bd9c-d1f4-4bc2-8ed6-9d357084b7d0&mscrid=yzTFsZgieH6YCepc&sso_nonce=bP4LIwwbfLfZNjRrFI8fXJiaIVXzJTwC&tx=cpwfZtJf0qfT2xen&flowToken=1EgfvgpHoygkIBzikdsTLVA8mEIdHGHZolHhnFnj06WGPB3G9ey2Rpfgw47yvH6S&canary=zBBCurGz&hpgact=1800&hpgid=1104&pgid=DstsWebV2&ctx=efTyEXp4L0Hk&opid=EJIkowcT&uaid=rey3CYFRF60Shh9f&wctx=Hf4Po56lBxI3W2Ihttwpxuln&cbcxt=SlXNty2vZjlVoLm8&username=&mkt=en-US&lc=1033&lic=1
IP / ASN
104.26.12.118
Title
Sign in to your account
Phishing - Microsoft
Suspicious - Suspicious Javascript code
Detections
urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
4
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-08-09 | 553 B | 508 B |  142.250.178.74 | |
api.telegram.org | 206724 | 2003-12-15 | 2015-06-25 | 2026-08-12 | 653 B | 334 B |  149.154.166.110 |  |
aadcdn.msauth.net | 5248 | 2018-10-25 | 2018-11-19 | 2026-08-12 | 1.9 kB | 18 kB | |  |
bolt.new | 52588 | 2024-07-09 | 2024-09-06 | 2026-08-11 | 509 B | 26 kB | 104.26.6.237 |  |
challenges.cloudflare.com | 11393 | 2009-02-17 | 2021-10-20 | 2026-08-09 | 513 B | 83 kB | 104.18.94.41 | |
sharepoint3883-4388eral-a8qi.bolt.host 14 alert(s) on this Host | unknown | 2024-11-14 | 2026-05-25 | 2026-08-13 | 1.6 kB | 202 kB | 104.26.13.118 |  |
Nginx:1.30.1 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Azure Front Door (Load balancers)
Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.Azure (PaaS)
Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Netlify (PaaS, CDN)
Netlify providers hosting and server-less backend services for web applications and static websites.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | sharepoint3883-4388eral-a8qi.bolt.host/assets/index-dD_7Tjeq.js | malware | Detects file containing Telegram Bot API |
| Cloudflare DNS | sharepoint3883-4388eral-a8qi.bolt.host | malicious | Sinkholed |
| OpenDNS | sharepoint3883-4388eral-a8qi.bolt.host | phishing | Phishing Block |
| DNS4EU | sharepoint3883-4388eral-a8qi.bolt.host | malicious | Sinkholed |
JavaScript (3)
No JavaScripts
HTTP Transactions (10)
| URL | IP | Response | Size |
|---|