urlquery Phishing - Known Phishing Kit detected
VerdictPhishing
Severityhigh
WEBSITE ANALYSIS REPORT
http://office.microsologn.com
public
Phishing detected
Review evidence →2 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://office.microsologn.com
- Submitted IP / ASN
2.25.220.237 AS47583 · Hostinger International Limited
- Final URL
- https://m365.cloud.microsoft/
- Final IP / ASN
- 13.107.6.156 AS8068 · MICROSOFT-CORP-MSN-AS-BLOCK
Final page
- Page title
- Microsoft 365 - Sign into Copilot
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 507.9 KB (520058 bytes)
Detections
Activity
- HTTP requests
- 66
- Observed hosts
- 17
- Script records
- 27
Estimated HTTP data
- Sent
- ~54.0 KB
- Received
- ~6.35 MB
Page capture
Final browser state
m365.cloud.microsoft
Screenshot unavailableNo screenshot pixels areavailable for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
1Threat Detection Systems
1DNS4EU Sinkholed
VerdictMalicious
Severitymedium
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| admin.microsoft.com | 4878 | 1991-05-02 | 2018-01-10 | 2026-09-24 | 1.8 KB | 6.1 KB | 150.171.73.13 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| uhf.microsoft.com | 46576 | 1991-05-02 | 2017-02-01 | 2026-09-24 | 564 B | 4.4 KB |  23.49.24.19 | Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. |
| www.office.com | 10848 | 1999-04-20 | 2014-02-12 | 2026-09-15 | 483 B | 287 B | 13.107.6.156 | |
| www.microsoft.com | 812 | 1991-05-02 | 2012-05-21 | 2026-09-21 | 2.3 KB | 336.3 KB | 2.18.174.85 | Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| logincdn.msauth.net | 23083 | 2018-10-25 | 2019-04-23 | 2026-09-24 | 500 B | 17.6 KB | 13.107.246.53 | Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. |
| config.edge.skype.com | 104 | 2003-04-23 | 2015-10-05 | 2026-09-16 | 704 B | 1006 B | 150.171.22.17 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| wcpstatic.microsoft.com | 37815 | 1991-05-02 | 2020-09-15 | 2026-09-23 | 485 B | 277.4 KB | 13.107.213.53 | Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. |
| www.clarity.ms | 4064 | 2017-04-03 | 2018-08-22 | 2026-09-18 | 464 B | 245 B |  20.250.198.32 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| res.cdn.office.net | 686 | 1994-11-14 | 2021-09-30 | 2026-09-24 | 17.8 KB | 4.72 MB | 23.36.76.128 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| browser.events.data.microsoft.com | 380 | 1991-05-02 | 2018-05-25 | 2026-09-18 | 4.6 KB | 4.1 KB |  51.132.193.111 | Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| c.s-microsoft.com | 46140 | 2012-02-07 | 2013-11-06 | 2026-09-22 | 3.2 KB | 184.9 KB | 96.6.17.223 | |
| login.live.com | 179 | 1994-12-28 | 2012-05-21 | 2026-09-17 | 694 B | 14.7 KB |  20.190.181.1 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| js.monitor.azure.com | 3578 | 1994-10-25 | 2020-04-24 | 2026-09-18 | 508 B | 91.0 KB | 13.107.213.53 | Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. |
| mem.gfx.ms | 38230 | 2012-09-07 | 2015-02-13 | 2026-09-24 | 2.1 KB | 414.3 KB | 13.107.246.53 | Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-09-21 | 676 B | 6.2 KB | 20.190.181.4 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| office.microsologn.com 3 alerts | N/A | 2026-09-14 | 2026-09-21 | 2026-09-21 | 1014 B | 574 B | 2.25.220.237 | OpenResty:1.31.1.1 Web servers OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. Express Web frameworks, Web servers Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs. Node.js Programming languages Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser. PHP:8.2.33 Programming languages PHP is a general-purpose scripting language used for web development. |
| m365.cloud.microsoft | 3263 | 2015-09-25 | 2022-12-01 | 2026-09-21 | 489 B | 309.8 KB | 13.107.6.156 | Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Azure Monitor Analytics, Performance Azure Monitor collects monitoring telemetry from a variety of on-premises and Azure sources. Azure Monitor helps you maximise the availability and performance of your applications and services. |