urlquery Phishing - Microsoft
VerdictPhishing
Severitymedium
WEBSITE ANALYSIS REPORT
http://tap-rt-prod1-t.campaign.adobe.com/r/?id=h9ecb88b,c1e96b3,69fe0fb&p1=londonwearitall.com?dJUQNaJJ&ref=nicole_yt_wong@manulifeam.com
public
Phishing detected
Review evidence →6 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://tap-rt-prod1-t.campaign.adobe.com/r/?id=h9ecb88b,c1e96b3,69fe0fb&p1=londonwearitall.com?dJUQNaJJ&ref=nicole_yt_wong@manulifeam.com
- Submitted IP / ASN
52.18.143.203 AS16509 · AMAZON-02
- Final URL
- https://londonwearitall.com/e/2azdcm?d=Lz9sb2dpbl9oaW50PW5pY29sZV95dF93b25nQG1hbnVsaWZlYW0uY29t
- Final IP / ASN
188.114.96.1 AS13335 · CLOUDFLARENET
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/plain; charset=utf-8
- Final DOM size
- 0 B (0 bytes)
Detections
Activity
- HTTP requests
- 37
- Observed hosts
- 6
- Script records
- 267
Estimated HTTP data
- Sent
- ~129.7 KB
- Received
- ~2.31 MB
Page capture
Final browser state
londonwearitall.com
Screenshot unavailableNo screenshot pixels areavailable for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
3urlquery Phishing - Microsoft Outlook
VerdictPhishing
Severitymedium
urlquery Phishing - Gcore Phishing Kit
VerdictPhishing
Severityhigh
Threat Detection Systems
2Cloudflare DNS Sinkholed
VerdictMalicious
Severitymedium
DNS4EU Sinkholed
VerdictMalicious
Severitymedium
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| londonwearitall.com 97 alerts | N/A | N/A | N/A | N/A | 31.2 KB | 1.70 MB | 188.114.96.1 | Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| challenges.cloudflare.com | 11393 | 2009-02-17 | 2021-10-20 | 2026-03-29 | 6.4 KB | 597.5 KB | 104.18.94.41 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| res.public.onecdn.static.microsoft | 930 | 2023-05-05 | 2024-03-21 | 2026-04-01 | 478 B | 4.3 KB |  23.36.76.120 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| autologon.microsoftazuread-sso.com | 5151 | 2016-07-22 | 2017-01-30 | 2026-03-26 | 644 B | 21.3 KB |  40.126.53.21 | jQuery JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. |
| tap-rt-prod1-t.campaign.adobe.com | N/A | 1986-11-17 | 2017-03-27 | 2026-03-30 | 598 B | 2.8 KB | 34.252.229.116 | Apache HTTP Server Web servers Apache is a free and open-source cross-platform web server software. |
| portal.microsoftonline.com | 222862 | 2002-07-09 | 2014-01-23 | 2026-03-27 | 554 B | 1.8 KB |  150.171.74.13 |