http://p7v3w.airodyneqwerty.top/2743248b60dc
15 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://p7v3w.airodyneqwerty.top/2743248b60dc
- Submitted IP / ASN
18.142.249.243 AS16509 · AMAZON-02
- Final URL
- https://office.airodyneqwerty.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639241302888833983.ZGViMjU2OGUtZTA4My00NjQ3LTkxZDYtOGZkNTdiZjU3YTJhYzhiMWRiZDYtMDY1NS00Mzc1LWFjZTItYTBmYzUxNGExM2Vh&ui_locales=en-US&mkt=en-US&client-request-id=1144c515-388d-42c6-bf66-6616bf168a7c&siwa=1&siwg=1&state=FPLnGFYbYpEG7Z0Y4AAb3v7pdENV0rYQxu3Zyk3tDCjyrYyb7wh0y7NxIUQTnEMQnh8U4HBEB3hVJPdL48ApuWyp55ucLYPZvLokAc9EPNb4vcMoXnHLKto4K1jg7qkgzeEwtebY8vx3z9CPNZ7gGZVTtuTG2auEGdfyw_Jiue0juAzhfg6bQCstlfsDIBdsaD8pNJT5Cswa0zQ4BNehymbhwh92aE9RG-zNKAFDoIDRjFGlBYskgh97oRW2dzqxVL2fJ0j-_yKT6AB6PjvxuL4I2lkglyrLzwv2SVjNor9D-d1mRv0coEwxJMLZP8KgmdLUMQI9Qij3LLZySIqE26hTbqdcBywDjYtH7HWzRFCQa-5v5kicgmiMEmsS7Mau4qUBY7v0v2Kha4Q3vLwUKBSw7Rk4uS-rLKB2s4T6e5MaGTPAaFdqLXkznElRBKbZ&x-client-SKU=ID_NET8_0&x-client-ver=8.16.0.0
- Final IP / ASN
18.142.249.243 AS16509 · AMAZON-02
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 102.6 KB (105104 bytes)
Detections
Activity
- HTTP requests
- 26
- Observed hosts
- 5
- Script records
- 192
Estimated HTTP data
- Sent
- ~26.6 KB
- Received
- ~3.53 MB
Page capture
Final browser state
available for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
3urlquery Phishing - Evilginx MitM Proxy
urlquery Phishing - Microsoft Outlook
Threat Detection Systems
3OpenDNS Phishing Block
DNS4EU Sinkholed
Quad9 DNS Sinkholed
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| office.airodyneqwerty.top 25 alerts | N/A | N/A | 2026-09-03 | 2026-09-03 | 14.0 KB | 101.0 KB | Apache HTTP Server Web servers Apache is a free and open-source cross-platform web server software. | |
| ebqprupn.airodyneqwerty.top 3 alerts | N/A | 2026-08-17 | 2026-09-03 | 2026-09-03 | 635 B | 4.1 KB | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. | |
| bphkxnap.airodyneqwerty.top 3 alerts | N/A | 2026-08-17 | 2026-09-04 | 2026-09-04 | 634 B | 2.9 KB | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. | |
| cdn-1.airodyneqwerty.top 51 alerts | N/A | 2026-08-17 | 2026-09-03 | 2026-09-03 | 10.3 KB | 1.54 MB | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Apache HTTP Server Web servers Apache is a free and open-source cross-platform web server software. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. | |
| p7v3w.airodyneqwerty.top 8 alerts | N/A | 2026-08-17 | 2026-09-04 | 2026-09-04 | 1.1 KB | 1.89 MB |