urlquery Phishing - Microsoft
VerdictPhishing
Severitymedium
WEBSITE ANALYSIS REPORT
https://platlog.com.br/Kuop
public
Phishing detected
Review evidence →4 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://platlog.com.br/Kuop
- Submitted IP / ASN
200.219.255.117 AS15830 · Equinix (EMEA) Acquisition Enterprises B.V.
- Final URL
- https://login.pinturascosta.sbs/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639202528976679179.MzczMmVjZGYtYjk0My00OTJlLWFiODItY2M5MzA5ZTA0YzdlYjQ5MThhYzEtNDVhZi00ZjM4LThkYmEtYzZmOTc4YWE3M2Y0&ui_locales=en-US&mkt=en-US&client-request-id=46160b1c-3120-4b45-9be5-56566cdd5804&state=3rkHdb4OCK1W7r_VzRLsU1D_TlqyZhms5BYJEtuxLghKT_UJEKZmysGuDxcasAnu71dG25sV3vtox8VEE3JtSiuAaJ2ZAN17yq8NFLE7Eykdcnv-OQg4pqJF3nCDA_vFeLFayiqXSRB38ImmHAJJRR3g7hSPsFfrP8Z_WwWYeQguhYqwXPCXB-ilAsU9H7lvVWC_On4EADWdASYBygS7Y02z3mh7xoD-l3AOChGIcEVxWGWh3pinzwtC22MalMqsMN7y5VOJBnuZ05AWBnDjM5UW5Hy6wJw_RAWljVKzfGh-F-3PqIvc7WmV6_HhXZysQcStg48I0xhgude_PJBrTPFaBJffv59akR0BebQrJPSS7R9s2V2ItPaUUVWq2H7hfTUA4JCjHozqaLN93q8VXnC4gAxNrBFcuYw5dF4Z2Os&x-client-SKU=ID_NET8_0&x-client-ver=8.14.0.0
- Final IP / ASN
104.21.73.188 AS13335 · CLOUDFLARENET
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/plain; charset=utf-8
- Final DOM size
- 0 B (0 bytes)
Detections
Activity
- HTTP requests
- 35
- Observed hosts
- 9
- Script records
- 193
Estimated HTTP data
- Sent
- ~57.3 KB
- Received
- ~4.12 MB
Page capture
Final browser state
login.pinturascosta.sbs
Screenshot unavailableNo screenshot pixels areavailable for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
3urlquery Phishing - Microsoft Outlook
VerdictPhishing
Severitymedium
urlquery Phishing - Evilginx MitM Proxy
VerdictPhishing
Severityhigh
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| aadcdn.msftauth.net | 5262 | 2018-10-25 | 2018-11-19 | 2026-07-20 | 533 B | 575.9 KB |  95.101.10.185 | |
| challenges.cloudflare.com | 11393 | 2009-02-17 | 2021-10-20 | 2026-07-19 | 952 B | 20.4 KB | 104.18.95.41 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| react.pinturascosta.sbs 1 alerts | N/A | 2026-06-28 | 2026-07-21 | 2026-07-21 | 1.0 KB | 2.9 KB | 104.21.73.188 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| ywnjb.pinturascosta.sbs 1 alerts | N/A | 2026-06-28 | 2026-07-21 | 2026-07-21 | 1.0 KB | 4.5 KB | 104.21.73.188 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| res.cdn.office.net | 686 | 1994-11-14 | 2021-09-30 | 2026-07-14 | 578 B | 1.2 KB | 23.36.76.120 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| vn3hg.pinturascosta.sbs 15 alerts | N/A | 2026-06-28 | 2026-07-21 | 2026-07-21 | 12.6 KB | 1.54 MB | 104.21.73.188 | Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| browser.events.data.pinturascosta.sbs 2 alerts | N/A | 2026-06-28 | 2026-07-21 | 2026-07-21 | 1.4 KB | 0 B | Not recorded | |
| login.pinturascosta.sbs 30 alerts | N/A | 2026-06-28 | 2026-07-21 | 2026-07-21 | 17.5 KB | 1.98 MB | 104.21.73.188 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| platlog.com.br | N/A | 2006-06-13 | 2026-07-21 | 2026-07-21 | 975 B | 14.2 KB | 200.219.255.117 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |