urlquery Phishing - Microsoft
VerdictPhishing
Severitymedium
WEBSITE ANALYSIS REPORT
https://login.authhmicrosoftonline.sbs/MAPidOXO?clckid=f8b76601
public
Phishing detected
Review evidence →5 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://login.authhmicrosoftonline.sbs/MAPidOXO?clckid=f8b76601
- Submitted IP / ASN
178.128.177.148 AS14061 · DigitalOcean, LLC
- Final URL
- https://login.authhmicrosoftonline.sbs/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639274934071906680.YTRmN2YwNDgtMjNjZC00OTY0LWJmZDAtYzczZDM5NGIyOTFlOThjMGQxNjgtMTRjYy00ZTU0LTg2ODEtY2EwNmY5N2NjODlk&ui_locales=en-US&mkt=en-US&client-request-id=6c5f9ad3-42d2-4706-a8ee-6cfe5e691e3d&siwa=1&siwg=1&state=AqxtUb9H5umK6bBfMBEcUvDCWDIyGckPTBzfStxo6_RKuMX017VX08nFbm-ejpfUzOUjZgGWfRvwORW1HgG-vRBdHIQdYzG87JGOXIINiZC-sdFSwk4VUarCMwLFNTmvf3GWLNaFWcm_3ajTi-FvVnH3rNV-L17aiHXaQFAs_5XOgfWZlFBmL4-bUuqajQsJMNyImV9hHrEgi42i1fRZG4k3cn-sMm1DHdYQgmuRVJBOCeRKhFRK-_hGJJpKxyErjwcRZpOXM5unwTAIEpgP7GEXMWra0dTt_N0mMejZOmYU4t3TJNGz-cPtzOazG08H-p3PRhz-ei8Ra0rBMksy1q3ForWOpppFv0Xl3Vqom4rtEHJaQ_NekSbB048d-RGD8y4LK_tJ1ikZ9W7BKf0WPGT0JkI1EDWIcQ2qDxKrKlrFKUpDL66HuBS5uA0QlN4M&x-client-SKU=ID_NET8_0&x-client-ver=8.16.0.0
- Final IP / ASN
- 178.128.177.148 AS14061 · DIGITALOCEAN-ASN
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 61.8 KB (63244 bytes)
Detections
Activity
- HTTP requests
- 8
- Observed hosts
- 3
- Script records
- 0
Estimated HTTP data
- Sent
- ~6.3 KB
- Received
- ~71.4 KB
Page capture
Final browser state
login.authhmicrosoftonline.sbs
Screenshot unavailableNo screenshot pixels areavailable for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
3urlquery Phishing - Evilginx MitM Proxy
VerdictPhishing
Severityhigh
urlquery Phishing - Microsoft Authentication Reverse Proxy
VerdictPhishing
Severityhigh
Threat Detection Systems
1DNS4EU Sinkholed
VerdictMalicious
Severitymedium
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| aadcdn.msauth.net | 5248 | 2018-10-25 | 2018-11-19 | 2026-10-07 | 2.3 KB | 0 B | Not recorded | |
| www.authhmicrosoftonline.sbs 2 alerts | N/A | 2026-10-02 | 2026-10-13 | 2026-10-13 | 581 B | 2.9 KB | 178.128.177.148 | Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. |
| login.authhmicrosoftonline.sbs 12 alerts | N/A | 2026-10-02 | 2026-10-13 | 2026-10-13 | 3.5 KB | 68.5 KB | 178.128.177.148 |