&gt; Let’s explore.

Phishing - Microsoft Outlook URLQuery medium severity Phishing

Infrastructure & activity

172.67.160.12zz AS13335 CLOUDFLARENET

Hosts: 11
Requests: 51
Received: 4.54 MB
Sent: 51.4 KB

Notable observed hosts

8 more · View hosts →

Report tags

http://access.ointernete.info/service

access.ointernete.info

05 May 2026 · 22:41 UTC

Captured page Enlarge ↗ Edge computing reduces latency

Final URL Different hostname

https://online-app.charrue.info/?auth2=4KW7vfzFC13XViFHBXSqNVV3rwjQl_Ms

Detection highlights

Phishing - Microsoft Outlook URLQuery medium severity Phishing

Infrastructure & activity

104.21.42.152zz AS13335 CLOUDFLARENET

Hosts: 4
Requests: 28
Received: 1.75 MB
Sent: 23.4 KB

Notable observed hosts

Report tags

https://wandering-frog-e8f0.iqsluwmhmb95cmb.workers.dev/0x69b19b8be8bfb5d41f021393/om/gbellensen.ip@glow.com

wandering-frog-e8f0.iqsluwmhmb95cmb.workers.dev

05 May 2026 · 20:54 UTC

Captured page Enlarge ↗ SignIn Now via refHmeEAdvFwzuFaTjpbPi3JYL78U

Detection highlights

URLQuery 2IDS 1TDS 0

Infrastructure & activity

172.67.219.228zz AS13335 CLOUDFLARENET

Hosts: 4
Requests: 18
Received: 1.55 MB
Sent: 12.1 KB

Notable observed hosts

Report tags

https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=78ce50cb-54eb-42b2-9e79-9c71b0309da7&response_type=code&response_mode=query&scope=openid+profile+email+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&prompt=none&state=aS5zY2FuZG9sYXJhQG9jcmltLmNvbq=

login.microsoftonline.com

22 Apr 2026 · 14:48 UTC

https://pricemacr-ent.taintariors.co.uk/?v=1#aS5zY2FuZG9sYXJhQG9jcmltLmNvbq=

Final URL Different hostname

Detection highlights

Infrastructure & activity

40.126.53.8Sweden AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 6
Requests: 23
Received: 1.63 MB
Sent: 15.7 KB

Notable observed hosts

Report tags

https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=78ce50cb-54eb-42b2-9e79-9c71b0309da7&response_type=code&response_mode=query&scope=openid+profile+email+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&prompt=none&state=aS5zY2FuZG9sYXJhQG9jcmltLmNvq=

login.microsoftonline.com

22 Apr 2026 · 14:39 UTC

https://pricemacr-ent.taintariors.co.uk/?v=1#aS5zY2FuZG9sYXJhQG9jcmltLmNvq=

Final URL Different hostname

Detection highlights

Infrastructure & activity

20.190.181.0Sweden AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 6
Requests: 26
Received: 1.63 MB
Sent: 19.9 KB

Notable observed hosts

Report tags

https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=78ce50cb-54eb-42b2-9e79-9c71b0309da7&response_type=code&response_mode=query&scope=openid+profile+email+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&prompt=none&state=aS5zY2FuZG9sYXJhQG9jcmltLmNvbQ==

login.microsoftonline.com

22 Apr 2026 · 10:37 UTC

https://pricemacr-ent.taintariors.co.uk/common/login

Final URL Different hostname

Detection highlights

Infrastructure & activity

20.190.147.5France AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 8
Requests: 46
Received: 2.59 MB
Sent: 33.2 KB

Notable observed hosts

5 more · View hosts →

Report tags

https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=0c92cfc1-7dd4-4958-a268-666d7df5e99c&response_type=code&response_mode=query&scope=openid+profile+email+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&prompt=none&state=aS5zY2FuZG9sYXJhQG9jcmltLmNvbQ==

login.microsoftonline.com

22 Apr 2026 · 10:31 UTC

https://pricemacr-ent.taintariors.co.uk/?v=1

Final URL Different hostname

Detection highlights

Infrastructure & activity

20.190.147.6France AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 9
Requests: 30
Received: 1.72 MB
Sent: 22.3 KB

Notable observed hosts

6 more · View hosts →

Report tags

https://documents-internal-employee.s3.eu-central-1.amazonaws.com/smart.html

documents-internal-employee.s3.eu-central-1.amazonaws.com

22 Apr 2026 · 06:44 UTC

Captured page Enlarge ↗ Page title not recorded

Final URL Different hostname

https://ssolive.lnterspiro.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2fonline-app.lnterspiro.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT66yOvvV_j7Lx73ZU3rgufNM5i5IzPySwDq1zFqEzYOP0LjIwvGBlvMQn6F6V7poQXu6WmpBYllmTm511gEXjFwmPAbMXBwSXAIMGgwPCDhXERqxCXQOTCj533d5c4rd9fcfxeqCLDKVZ9ba-wsix3o1yfUsPECscql7ySxOwiS3c3l6CyZDc3U0u_IPeonCjf4iCXZFtzK8MJbEIT2JhOsTF8YGPsYGeYxc5wgJNxAw_jAV6GH3xLv53du7x9xXuPV_w6pY6OyblGURElni6-BsYlhX4-LlkBjhGJIWXlScEuHpnhJQHGpoYuTqWeobYbBBgeCDA8EGT4IdjQ4NAhxAAA0&estsfed=1&uaid=d6597f8facef4343bbaed4ec45a1e481&fci=https%3a%2f%2fportal.microsoftonline.com.orgid.com&username=al-ali-family%40outlook.com&login_hint=al-ali-family%40outlook.com

Detection highlights

Phishing - Microsoft Outlook URLQuery medium severity Phishing

Infrastructure & activity

3.5.120.80United States

Hosts: 5
Requests: 27
Received: 1.63 MB
Sent: 22.2 KB

Notable observed hosts

2 more · View hosts →

Report tags

https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=78ce50cb-54eb-42b2-9e79-9c71b0309da7&response_type=code&response_mode=query&scope=openid+profile+email+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&prompt=none&state=aS5zY2FuZG9sYXJhQG9jcmltLmNvbQ==

login.microsoftonline.com

21 Apr 2026 · 14:21 UTC

https://conscince.sosinskiglobal.ru/?v=1

Final URL Different hostname

Detection highlights

URLQuery 3IDS 0TDS 2

1 more findings · View detections →

Infrastructure & activity

40.126.53.11Sweden AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 9
Requests: 30
Received: 1.71 MB
Sent: 22.2 KB

Notable observed hosts

6 more · View hosts →

Report tags

http://jvvgrup.bubbleapps.io/

jvvgrup.bubbleapps.io

20 Apr 2026 · 12:12 UTC

Captured page Enlarge ↗ Continuous deployment

Final URL Different hostname

https://online-app.ameri-tech.info/?auth2=z-LnknyWoSO_92nMOvNh374e_Yh7ncxg

Detection highlights

Phishing - Microsoft Outlook URLQuery medium severity Phishing

Infrastructure & activity

104.18.246.24zz AS13335 CLOUDFLARENET

Hosts: 7
Requests: 46
Received: 7.47 MB
Sent: 36.3 KB

Notable observed hosts

4 more · View hosts →

Report tags

https://encode.3tone.info/service/

encode.3tone.info

20 Apr 2026 · 12:00 UTC

Captured page Enlarge ↗ Unified communications enhance collaboration

Final URL Different hostname

https://online-app.sabzhost.info/?auth2=1rhSBBjaWTdNc_wvvmYBin4JL83uFv80

Detection highlights

URLQuery 2IDS 0TDS 2

Infrastructure & activity

172.67.161.220zz AS13335 CLOUDFLARENET

Hosts: 6
Requests: 39
Received: 3.17 MB
Sent: 30.5 KB

Notable observed hosts

Report tags

https://fatestone-at.chippingnorton.info/service

fatestone-at.chippingnorton.info

15 Apr 2026 · 13:16 UTC

Captured page Enlarge ↗ DevOps culture

Final URL Different hostname

https://online-app.wheresthemap.info/?auth2=yDpxma_pUIoSUq_WFoVT1pVzOv__4PXt

Detection highlights

Phishing - Microsoft Outlook URLQuery medium severity Phishing

Infrastructure & activity

172.67.197.159zz AS13335 CLOUDFLARENET

Hosts: 6
Requests: 40
Received: 3.19 MB
Sent: 31.2 KB

Notable observed hosts

Report tags

http://www.gwenet.org/office/

www.gwenet.org

11 Apr 2026 · 02:01 UTC

6 more findings · View detections →

Detection highlights

URLQuery 2IDS 3TDS 6

Infrastructure & activity

66.175.58.9Canada AS30447 INFB2-AS

Hosts: 4
Requests: 18
Received: 599.1 KB
Sent: 8.3 KB

Notable observed hosts

Report tags

microsoft phishing

Submit tags

openphish

https://www.google.com/url?q=https%3A%2F%2Felectroniccrafts.com%2Fa&sa=D&sntz=1&usg=AOvVaw2WBf7fJiLYcHJsvs2VoAK6#?a=cnlhbi5iYWVobGVyQGFyYml0ZXJzcG9ydHMuY29t

www.google.com

02 Apr 2026 · 20:19 UTC

Captured page Enlarge ↗ SignIn Now via ref8YGCAduAc80cUX5u4jZvqdSoW0

Final URL Different hostname

https://shiny-tooth-5af9.p64mt0f3nvsnkow.workers.dev/0x69b19b8be8bfb5d41f021393/om/cnlhbi5iYWVobGVyQGFyYml0ZXJzcG9ydHMuY29t

Detection highlights

URLQuery 2IDS 1TDS 0

Infrastructure & activity

142.251.150.119United States AS15169 GOOGLE

Hosts: 7
Requests: 17
Received: 1.53 MB
Sent: 9.8 KB

Notable observed hosts

4 more · View hosts →

Report tags

https://encode.linkagratis.info/file

encode.linkagratis.info

02 Apr 2026 · 13:47 UTC

Captured page Enlarge ↗ High availability is critical for business continuity

Final URL Different hostname

https://online-app.vsem1.info/?auth2=1WA7Z3tTy61Z17wZAVTo7_w-TK5L5fma

Detection highlights

Phishing - Microsoft Outlook URLQuery medium severity Phishing

Infrastructure & activity

172.67.171.3zz AS13335 CLOUDFLARENET

Hosts: 6
Requests: 40
Received: 3.02 MB
Sent: 29.7 KB

Notable observed hosts

Report tags

https://www.google.com/url?q=https%3A%2F%2Fretrovideodanse.com%2Fq&sa=D&sntz=1&usg=AOvVaw3o1pARXjlLioe5CNWwhAz9#?a=bWVyZWRpdGguc2NocmFtQG1lZGljYWlkLm9oaW8uZ292

www.google.com

02 Apr 2026 · 12:36 UTC

Captured page Enlarge ↗ SignIn Now via refssaYyzznYjqdXsEFqTqzaU4izH

Final URL Different hostname

https://red-bar-51da.toge4lvuvpskbb37059.workers.dev/0x69c69d7365324bb05a0a5b71/om/bWVyZWRpdGguc2NocmFtQG1lZGljYWlkLm9oaW8uZ292

Detection highlights

URLQuery 2IDS 1TDS 1

Infrastructure & activity

142.251.155.119United States AS15169 GOOGLE

Hosts: 6
Requests: 16
Received: 1.15 MB
Sent: 9.5 KB

Notable observed hosts

Report tags

https://veranexe.com/?TjCfVIOZ&ref=wolfgang.haase@fill.co.at

veranexe.com

02 Apr 2026 · 08:46 UTC

https://veranexe.com/e/4dl5de?d=Lz9sb2dpbl9oaW50PXdvbGZnYW5nLmhhYXNlQGZpbGwuY28uYXQ=

Final URL

Detection highlights

URLQuery 4IDS 0TDS 0

Infrastructure & activity

172.67.154.48zz AS13335 CLOUDFLARENET

Hosts: 4
Requests: 24
Received: 1.89 MB
Sent: 21.5 KB

Notable observed hosts

Report tags

https://www.etracker.de/ccr?et=JL9o41j6KPpzI07LiF30slYhXHdyfYbylz1E+J5edLI=&etcc_med=Onsite_banner&etcc_cmp=drive.tech&etcc_par=maxon.com&etcc_ctv=Peper%20Robot&etcc_plc=Native%20Teaser&etcc_url=https://www.xinfuda-group.com/s3document/continue/00e0b3c6e363f86d008f44ba019788526ffc6e65/dGhvbWFzLmtsZWluQHJjcGUuYXQ=

www.etracker.de

02 Apr 2026 · 07:43 UTC

https://microsoft-aeutkglsehgkckefwwe.com/e/nu2c1y?d=Lz9sb2dpbl9oaW50PXRob21hcy5rbGVpbkByY3BlLmF0

Final URL Different hostname

Detection highlights

URLQuery 4IDS 0TDS 3

3 more findings · View detections →

Infrastructure & activity

62.201.164.117Germany AS12731 IPHH Internet Port Hamburg GmbH

Hosts: 6
Requests: 33
Received: 2.20 MB
Sent: 33.2 KB

Notable observed hosts

Report tags

https://www.etracker.de/ccr?et=JL9o41j6KPpzI07LiF30slYhXHdyfYbylz1E+J5edLI=&etcc_med=Onsite_banner&etcc_cmp=drive.tech&etcc_par=maxon.com&etcc_ctv=Peper%20Robot&etcc_plc=Native%20Teaser&etcc_url=https://www.xinfuda-group.com/s3document/continue/00e0b3c6e363f86d008f44ba019788526ffc6e65/dGhvbWFzLmtsZWluQHJjcGUuYXQ=

www.etracker.de

02 Apr 2026 · 07:34 UTC

https://microsoft-aeutkglsehgkckefwwe.com/e/5jkldi?d=Lz9sb2dpbl9oaW50PXRob21hcy5rbGVpbkByY3BlLmF0

Final URL Different hostname

Detection highlights

URLQuery 4IDS 0TDS 3

3 more findings · View detections →

Infrastructure & activity

62.201.164.117Germany AS12731 IPHH Internet Port Hamburg GmbH

Hosts: 6
Requests: 31
Received: 2.22 MB
Sent: 31.1 KB

Notable observed hosts

Report tags

http://tap-rt-prod1-t.campaign.adobe.com/r/?id=h9ecb88b,c1e96b3,69fe0fb&p1=londonwearitall.com?dJUQNaJJ&ref=nicole_yt_wong@manulifeam.com

tap-rt-prod1-t.campaign.adobe.com

02 Apr 2026 · 00:08 UTC

https://londonwearitall.com/e/2azdcm?d=Lz9sb2dpbl9oaW50PW5pY29sZV95dF93b25nQG1hbnVsaWZlYW0uY29t

Final URL Different hostname

Detection highlights

URLQuery 4IDS 0TDS 2

2 more findings · View detections →

Infrastructure & activity

52.18.143.203Ireland AS16509 AMAZON-02

Hosts: 6
Requests: 37
Received: 2.31 MB
Sent: 39.9 KB

Notable observed hosts

Report tags

https://www.google.com/url?q=https%3A%2F%2Felectroniccrafts.com%2Fa&sa=D&sntz=1&usg=AOvVaw2WBf7fJiLYcHJsvs2VoAK6#?a=ZmFiaW9fY2VyZWdhdHRvQGJyLmFqaW5vbW90by5jb20=

www.google.com

01 Apr 2026 · 18:53 UTC

Captured page Enlarge ↗ SignIn Now via refkTjLafHHF0RidpG9igxEkHv5qV

Final URL Different hostname

https://restless-mouse-81f8.p64mt0f3nvsnkow.workers.dev/0x69b19b8be8bfb5d41f021393/om/ZmFiaW9fY2VyZWdhdHRvQGJyLmFqaW5vbW90by5jb20=

Detection highlights

URLQuery 2IDS 1TDS 0

Infrastructure & activity

142.251.153.119United States AS15169 GOOGLE

Hosts: 8
Requests: 20
Received: 1.55 MB
Sent: 13.5 KB

Notable observed hosts

5 more · View hosts →

Report tags

https://angolalng-co.uk/?scpybwyj&email=alex.k.cheung@asia.bnpparibas.com

angolalng-co.uk

31 Mar 2026 · 11:23 UTC

Captured page Enlarge ↗ MOD-aypbc62nl5

Final URL Different hostname

https://ontariosocer.net/?qrc=alex.k.cheung%40asia.bnpparibas.com

Detection highlights

URLQuery 3IDS 0TDS 0

Infrastructure & activity

23.94.153.153United States AS36352 AS-COLOCROSSING

Hosts: 5
Requests: 22
Received: 1.81 MB
Sent: 19.3 KB

Notable observed hosts

2 more · View hosts →

Report tags

phishing microsoft outlook nakedpages aitm

http://angolalng-co.uk/?scpybwyj&email=wendy.wolfgram@slurpmail.net

angolalng-co.uk

30 Mar 2026 · 18:38 UTC

Captured page Enlarge ↗ MOD-cxebe7gocd

Final URL Different hostname

https://moevegloball.com/?qrc=wendy.wolfgram%40slurpmail.net

Detection highlights

URLQuery 3IDS 0TDS 0

Infrastructure & activity

23.94.153.153United States AS36352 AS-COLOCROSSING

Hosts: 4
Requests: 21
Received: 1.77 MB
Sent: 19.6 KB

Notable observed hosts

Report tags

phishing microsoft outlook nakedpages aitm

https://booots.petermarksalon.com/?v=1

booots.petermarksalon.com

29 Mar 2026 · 15:09 UTC

3 more findings · View detections →

Detection highlights

URLQuery 3IDS 0TDS 4

Infrastructure & activity

195.242.118.51British Virgin Islands AS200313 IT WEB LTD

Hosts: 3
Requests: 20
Received: 1.40 MB
Sent: 17.9 KB

Notable observed hosts

View hosts →

Report tags

Submit tags

openphish