urlquery Phishing - Microsoft
VerdictPhishing
Severitymedium
WEBSITE ANALYSIS REPORT
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=0c92cfc1-7dd4-4958-a268-666d7df5e99c&response_type=code&response_mode=query&scope=openid+profile+email+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&prompt=none&state=aS5zY2FuZG9sYXJhQG9jcmltLmNvbQ==
public
Phishing detected
Review evidence →4 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=0c92cfc1-7dd4-4958-a268-666d7df5e99c&response_type=code&response_mode=query&scope=openid+profile+email+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&prompt=none&state=aS5zY2FuZG9sYXJhQG9jcmltLmNvbQ==
- Submitted IP / ASN
20.190.147.6 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
- Final URL
- https://pricemacr-ent.taintariors.co.uk/?v=1
- Final IP / ASN
137.184.30.104 AS14061 · DIGITALOCEAN-ASN
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/plain; charset=utf-8
- Final DOM size
- 0 B (0 bytes)
Detections
Activity
- HTTP requests
- 30
- Observed hosts
- 9
- Script records
- 254
Estimated HTTP data
- Sent
- ~24.7 KB
- Received
- ~1.72 MB
Page capture
Final browser state
pricemacr-ent.taintariors.co.uk
Screenshot unavailableNo screenshot pixels areavailable for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
2urlquery Phishing - Microsoft Outlook
VerdictPhishing
Severitymedium
Threat Detection Systems
1DNS4EU Sinkholed
VerdictMalicious
Severitymedium
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| portal.microsoftonline.com | 222862 | 2002-07-09 | 2014-01-23 | 2026-04-18 | 566 B | 1.8 KB | 150.171.73.13 | |
| aadcdn.msauth.net | 5248 | 2018-10-25 | 2018-11-19 | 2026-04-15 | 6.0 KB | 1.39 MB | 13.107.246.53 | Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-04-20 | 3.9 KB | 30.1 KB | 20.190.147.10 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| autologon.microsoftazuread-sso.com | 5151 | 2016-07-22 | 2017-01-30 | 2026-04-16 | 651 B | 21.3 KB |  40.126.53.16 | jQuery JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. |
| aadcdn.msftauth.net | 5262 | 2018-10-25 | 2018-11-19 | 2026-04-20 | 525 B | 147.6 KB | 2.22.225.32 | |
| pricemacr-ent.taintariors.co.uk 14 alerts | N/A | 2026-02-11 | 2026-04-22 | 2026-04-22 | 8.0 KB | 106.5 KB | 137.184.30.104 | |
| login.live.com | 179 | 1994-12-28 | 2012-05-21 | 2026-04-15 | 981 B | 4.9 KB | 20.190.147.9 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| neurologos.com.mx 2 alerts | N/A | 2009-02-06 | 2025-10-10 | 2026-04-19 | 1.2 KB | 13.0 KB | 192.185.140.112 | Apache HTTP Server Web servers Apache is a free and open-source cross-platform web server software. jQuery CDN CDN jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder. jQuery:3.3.1 JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. |
| aadcdn.msauthimages.net | 24430 | 2018-11-12 | 2019-08-14 | 2026-04-15 | 556 B | 7.8 KB |  95.101.10.97 |