urlquery.net
Investigate / Report search

Let’s explore.

Use report fields, exact indicators, quoted text, and Boolean operators. Open the search guide.

QUERY RESULTS: REPORTS

94 matches · showing 1–24 · 639.633123ms

onmicrosoftonline-mmscrmcustomers.mm.am

https://onmicrosoftonline-mmscrmcustomers.mm.am/login?method=signin&mode=secure&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&privacy=on&sso_reload=true&redirect_urI=https%3A%2F%2Flogin.microsoftonline.com%2F
Captured page Enlarge ↗ Sign in to your account
Final URL
https://onmicrosoftonline-mmscrmcustomers.mm.am/

Detection highlights

URLQuery 2IDS 0TDS 3
1 more findings · View detections →

Infrastructure & activity

Australia 20.70.24.97Australia AS8075 Microsoft Corporation
Hosts
2
Requests
3
Received
4.1 KB
Sent
2.0 KB
Inspect network →

Notable observed hosts

View hosts →
Report tags
microsoft phishing
Open report →

onmicrosoftonline-mmscrmcustomers.mm.am

http://onmicrosoftonline-mmscrmcustomers.mm.am/c
Captured page Enlarge ↗ Sign in to your account
Final URL
https://onmicrosoftonline-mmscrmcustomers.mm.am/

Detection highlights

URLQuery 2IDS 0TDS 4
2 more findings · View detections →

Infrastructure & activity

Australia 20.70.24.97Australia AS8075 Microsoft Corporation
Hosts
2
Requests
4
Received
3.0 KB
Sent
2.5 KB
Inspect network →

Notable observed hosts

View hosts →
Report tags
microsoft phishing
Submit tags
openphish
Open report →

onmicrosoftonline-mmscrmcustomers.mm.am

https://onmicrosoftonline-mmscrmcustomers.mm.am/login?method=signin&mode=secure&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&privacy=on&sso_reload=true&redirect_urI=https%3A%2F%2Flogin.microsoftonline.com%2F
Captured page Enlarge ↗ Sign in to your account
Final URL
https://onmicrosoftonline-mmscrmcustomers.mm.am/

Detection highlights

URLQuery 2IDS 0TDS 4
2 more findings · View detections →

Infrastructure & activity

Australia 20.70.24.97Australia AS8075 Microsoft Corporation
Hosts
2
Requests
3
Received
2.7 KB
Sent
2.0 KB
Inspect network →

Notable observed hosts

View hosts →
Report tags
microsoft phishing
Submit tags
openphish
Open report →

saga.so

https://saga.so/26dd4f2f-9200-4ad3-a918-39f3e9585719
Captured page Enlarge ↗ Technical debt slows innovation
Final URL Different hostname
https://uqstvghy.windowsgeek.info/?auth2=fIZ6xFSUzRQqpY1L8avXutr9Dy-PTYPK

Detection highlights

URLQuery 1IDS 0TDS 8
View detections →

Infrastructure & activity

Germany 63.176.8.218Germany AS16509 Amazon.com, Inc.
Hosts
17
Requests
73
Received
15.89 MB
Sent
68.6 KB
Inspect network →

Notable observed hosts

14 more · View hosts →
Report tags
phishing microsoft outlook
Open report →

windowsgeek.info

http://windowsgeek.info/VcuOaZXJ#test@test.com
Captured page Enlarge ↗ Zero downtime deployment maintains service continuity
Final URL Different hostname
https://hjywlbal.windowsgeek.info/?auth2=dfs5fsTdc7ccc90scKLCCpOJwtfeu4lS

Detection highlights

URLQuery 1IDS 0TDS 0
View detections →

Infrastructure & activity

Country unknown 104.21.39.68zz AS13335 Cloudflare, Inc.
Hosts
4
Requests
29
Received
1.67 MB
Sent
42.7 KB
Inspect network →

Notable observed hosts

1 more · View hosts →
Report tags
phishing microsoft outlook
Open report →

psyrusec.com

https://psyrusec.com/wildlan
Captured page Enlarge ↗ Sign in to your account
Final URL Different hostname
https://wildlands.acltci.com/

Detection highlights

URLQuery 2IDS 0TDS 3
1 more findings · View detections →

Infrastructure & activity

United States 50.31.174.181United States AS23352 DEFT.COM
Hosts
4
Requests
6
Received
5.3 KB
Sent
3.4 KB
Inspect network →

Notable observed hosts

1 more · View hosts →
Report tags
microsoft phishing
Submit tags
openphish
Open report →

wildlands.acltci.com

https://wildlands.acltci.com/login?method=signin&mode=secure&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&privacy=on&sso_reload=true&redirect_urI=https%3A%2F%2Flogin.microsoftonline.com%2F
Captured page Enlarge ↗ Sign in to your account
Final URL
https://wildlands.acltci.com/

Detection highlights

URLQuery 2IDS 0TDS 3
1 more findings · View detections →

Infrastructure & activity

United States 216.24.57.18United States AS397273 Render
Hosts
3
Requests
4
Received
4.6 KB
Sent
2.5 KB
Inspect network →

Notable observed hosts

View hosts →
Report tags
microsoft phishing
Submit tags
openphish
Open report →

wildlands.acltci.com

https://wildlands.acltci.com/c
Captured page Enlarge ↗ Sign in to your account
Final URL
https://wildlands.acltci.com/

Detection highlights

URLQuery 2IDS 0TDS 3
1 more findings · View detections →

Infrastructure & activity

United States 216.24.57.16United States AS397273 Render
Hosts
2
Requests
4
Received
4.7 KB
Sent
2.4 KB
Inspect network →

Notable observed hosts

View hosts →
Report tags
microsoft phishing
Submit tags
openphish
Open report →

eur01.safelinks.protection.outlook.com

https://eur01.safelinks.protection.outlook.com/ap/od-59584e83/?url=https%3A%2F%2Fonedrive.live.com%2F%3Aw%3A%2Fg%2Fpersonal%2F8DB42DBE31EF5375%2FIQDAdDvm7VwvSKlF2pS5uUxYAdSIwFmnnzrhlaaYKIcStkM%3Fresid%3D8DB42DBE31EF5375!se63b74c05ced482fa945da94b9b94c58%26ithint%3Dfile%252Cdocx%26e%3D8oLLwl%26migratedtospo%3Dtrue%26redeem%3DaHR0cHM6Ly8xZHJ2Lm1zL3cvYy84ZGI0MmRiZTMxZWY1Mzc1L0lRREFkRHZtN1Z3dlNLbEYycFM1dVV4WUFkU0l3Rm1ubnpyaGxhYVlLSWNTdGtNP2U9OG9MTHds&data=05%7C02%7Ckarsten.ernst%40enercity-netz.de%7C524430284d084db7e8f208df09c85ebd%7C8ccd2b242b70401aa933bf4010009e5e%7C0%7C0%7C639240431158402449%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C40000%7C%7C%7C&sdata=lTHIWSohHrpluDKvK9AU7xIOTFTU42ae5KK1gDVNJL0%3D&reserved=0
Captured page Enlarge ↗ Data analytics
Final URL Different hostname
https://smlewbuf.usefuldoc.info/?auth2=eM3o4rZth1zF5KgM38Ur9TrkS5T31tsP

Detection highlights

URLQuery 1IDS 0TDS 4
View detections →

Infrastructure & activity

United States 52.102.115.66United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hosts
8
Requests
31
Received
1.62 MB
Sent
35.2 KB
Inspect network →

Notable observed hosts

5 more · View hosts →
Report tags
phishing microsoft outlook
Open report →

businessproposal-090888ff1ac0b241b3390cd595464c.onity.biz

https://businessproposal-090888ff1ac0b241b3390cd595464c.onity.biz/proposal/
Captured page Enlarge ↗ Microsoft account
Final URL Different hostname
https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2fldicyzca.volitant.info%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQu7fL2Z124xHODfScj5ymbjbMYOeNzMsvAKlcxKhM2Tv8CI-MLRsZbTIL-RemeKeHFbqkpqUWJJZn5eRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzEKsQlcMds7s9fle7O3dveufp2tTOcYtXPLXe2TEw1jMwtSrfMjExzSanMcPIyzkwLDorSdnRyKkv3dDZyC3MOCk-NtDWxMpzAJjSBjekUG8MHNsYOdoZZ7AwHOBk38DAe4GX4wTfr7NH_6-cdeu_xil_H1LA0pMogLcswLdAgLasky7ky2c3MLLjILKQsxSg1rzQtzNfAIsPUILnQxHaDAMMDAYYHggw_BBsaHDqEGAA1&estsfed=1&uaid=4f4bbad2a10549a4b03f890109ca3cb1&fci=https%3a%2f%2fportal.microsoftonline.com.orgid.com&username=test%40test.test&login_hint=test%40test.test

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

Country unknown 172.67.205.213zz AS13335 CLOUDFLARENET
Hosts
7
Requests
36
Received
2.23 MB
Sent
40.9 KB
Inspect network →

Notable observed hosts

4 more · View hosts →
Open report →

businessproposal-090888ff1ac0b241b3390cd595464c.onity.biz

https://businessproposal-090888ff1ac0b241b3390cd595464c.onity.biz/proposal/
Captured page Enlarge ↗ Artificial intelligence augments human capabilities
Final URL Different hostname
https://dtnudowc.volitant.info/?auth2=a3jXBgOmswSr_Ut2yP9EcQZSxVKpinjt

Detection highlights

URLQuery 2IDS 0TDS 0
View detections →

Infrastructure & activity

Country unknown 104.21.52.244zz AS13335 CLOUDFLARENET
Hosts
8
Requests
36
Received
2.17 MB
Sent
38.6 KB
Inspect network →

Notable observed hosts

5 more · View hosts →
Report tags
phishing microsoft outlook
Open report →

www.gwenet.org

http://www.gwenet.org/office/
Captured page Enlarge ↗ Sign in to your account

Detection highlights

URLQuery 2IDS 0TDS 5
3 more findings · View detections →

Infrastructure & activity

Canada 66.175.58.9Canada AS30447 INFB2-AS
Hosts
4
Requests
18
Received
592.1 KB
Sent
9.2 KB
Inspect network →

Notable observed hosts

1 more · View hosts →
Report tags
microsoft phishing
Submit tags
openphish
Open report →

hvacjobs.biz

https://hvacjobs.biz/project/?p=2302&preview=true
Captured page Enlarge ↗ Natural language
Final URL Different hostname
https://rrjzdpxp.stepantsov.info/?auth2=e-If_fwhASYjqu1Zaz3vWuYxNzjDng24

Detection highlights

URLQuery 2IDS 0TDS 0
View detections →

Infrastructure & activity

Country unknown 104.21.47.60zz AS13335 CLOUDFLARENET
Hosts
8
Requests
37
Received
2.16 MB
Sent
37.0 KB
Inspect network →

Notable observed hosts

5 more · View hosts →
Report tags
phishing microsoft outlook
Open report →

goetschich-at.lovable.app

https://goetschich-at.lovable.app/
Captured page Enlarge ↗ Test-driven development improves code quality
Final URL Different hostname
https://lgrsdnpl.prozri.info/?auth2=GoK3VtD7nj-sc8aU2zSPuRp9Wvcfj0CW

Detection highlights

URLQuery 2IDS 0TDS 0
View detections →

Infrastructure & activity

Sweden 185.41.148.1Sweden AS61207 Hostek AB
Hosts
11
Requests
42
Received
2.71 MB
Sent
37.6 KB
Inspect network →

Notable observed hosts

8 more · View hosts →
Report tags
phishing microsoft outlook
Open report →

yasminpuncak.com

http://yasminpuncak.com/?VCgiYTfE&ref=Y29udGFjdGNlbnRyZXBwQGVkdWNhdGlvbi53YS5lZHUuYXU=
Captured page Enlarge ↗ Sign in
Final URL
https://yasminpuncak.com/o9/49hn0o?d03y=40cjl1m4CjyjCjWMIjKB7bgZLIxdtAoXuQYriF80ivavGTuRUb9KFKpNPpxqf4_2

Detection highlights

URLQuery 3IDS 0TDS 1
View detections →

Infrastructure & activity

Country unknown 104.21.78.163zz AS13335 CLOUDFLARENET
Hosts
5
Requests
32
Received
2.37 MB
Sent
43.7 KB
Inspect network →

Notable observed hosts

2 more · View hosts →
Report tags
phishing microsoft outlook gcore aitm
Open report →

rupariag.hehongdaan.com.au

http://rupariag.hehongdaan.com.au/c
Captured page Enlarge ↗ Sign in to your account
Final URL
https://rupariag.hehongdaan.com.au/

Detection highlights

URLQuery 2IDS 0TDS 0
View detections →

Infrastructure & activity

Australia 13.77.50.97Australia AS8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hosts
2
Requests
4
Received
2.5 KB
Sent
2.4 KB
Inspect network →

Notable observed hosts

View hosts →
Report tags
microsoft phishing
Open report →

tiktok.com

https://tiktok.com/link/v2?aid=1988&lzdlang=enFSmPWg&scene=bio_url&target=adclick.g.doubleclick.net./%2Fpcs/click?CIO7IfjWKRXTAP84695-novemberkd%26amp%3B%26amp%3Badurl=%2F%2Fclassyceylon.lk%2Fxddoucuxsigns%2Fdatasiteprogrammingsjhgvfjddshjb%2F#?aesLHAJIBASHIRUMILE2FQE1KmqxsevHj6ALHAJIBASHIRUMILE2=cm1lbmRpc0BoaXJlbG9naWMuY29t
Captured page Enlarge ↗ Sign in
Final URL Different hostname
https://genesislalas.com/7agv/jsmwvz?ou8q=ae7LLIE7JfuYtyCElHmmpCi1zjCmOiLWlbIhl8Bo5aIpvA

Detection highlights

URLQuery 3IDS 0TDS 0
View detections →

Infrastructure & activity

Norway 95.101.10.170Norway AS20940 Akamai International B.V.
Hosts
7
Requests
34
Received
2.12 MB
Sent
45.4 KB
Inspect network →

Notable observed hosts

4 more · View hosts →
Report tags
phishing microsoft outlook gcore aitm
Open report →

engagement-v3.mektor.eu

https://engagement-v3.mektor.eu/bp/conglomorate
Captured page Enlarge ↗ Code repository
Final URL
https://engagement-v3.mektor.eu/?auth2=QowZ9weHGW7BmNFVB4eTC6Mni35Y2wvV

Detection highlights

URLQuery 0IDS 0TDS 2
View detections →

Infrastructure & activity

United States 129.212.183.235United States
Hosts
3
Requests
21
Received
1.58 MB
Sent
16.8 KB
Inspect network →

Notable observed hosts

View hosts →
Submit tags
openphish
Open report →

www.gwenet.org

http://www.gwenet.org/office/
Captured page Enlarge ↗ Sign in to your account

Detection highlights

URLQuery 2IDS 2TDS 5
5 more findings · View detections →

Infrastructure & activity

Canada 66.175.58.9Canada AS30447 INFB2-AS
Hosts
4
Requests
18
Received
563.1 KB
Sent
8.0 KB
Inspect network →

Notable observed hosts

1 more · View hosts →
Report tags
microsoft phishing
Submit tags
openphish
Open report →

www.google.com

https://www.google.com/url?q=https%3A%2F%2Fron-gfx.net%2Fc&sa=D&sntz=1&usg=AOvVaw1Ls0lRsVnfpcXva9ew9cqZ#?c=vQZSJ19RXgAZBwxECgAZBA0KSkElaldPGRYIBQMCVBsMFVH3HJlo
Captured page Enlarge ↗ SignIn Now via refBUCJwk9SijGx6UCr59CFHCdtNE
Final URL Different hostname
https://plain-dawn-63d3.herberthc88.workers.dev/0x69b19b8be8bfb5d41f021393/om/vQZSJ19RXgAZBwxECgAZBA0KSkElaldPGRYIBQMCVBsMFVH3HJlo

Detection highlights

URLQuery 2IDS 1TDS 0
View detections →

Infrastructure & activity

United States 142.251.156.119United States AS15169 GOOGLE
Hosts
9
Requests
29
Received
1.64 MB
Sent
22.9 KB
Inspect network →

Notable observed hosts

6 more · View hosts →
Report tags
phishing microsoft outlook
Open report →

www.google.com

https://www.google.com/url?q=https%3A%2F%2Fgeoaltimetricafrica.com%2Fb&sa=D&sntz=1&usg=AOvVaw2XGrs10M8_WhEUW7JKjRoP#?bb=AlRfKVlMRAgXBAwYDDoJFhkKVEcvRU9ZVBsGBA
Captured page Enlarge ↗ SignIn Now via ref0Gi21gFDnQiBUAQAAI1TSJNcOo
Final URL Different hostname
https://morning-sky-c345.iqsluwmhmb95cmb.workers.dev/0x69b19b8be8bfb5d41f021393/om/AlRfKVlMRAgXBAwYDDoJFhkKVEcvRU9ZVBsGBA

Detection highlights

URLQuery 2IDS 1TDS 0
View detections →

Infrastructure & activity

United States 142.251.153.119United States AS15169 GOOGLE
Hosts
8
Requests
26
Received
1.65 MB
Sent
18.5 KB
Inspect network →

Notable observed hosts

5 more · View hosts →
Report tags
phishing microsoft outlook
Open report →

www.google.com

https://www.google.com/url?q=https%3A%2F%2Fgeoaltimetricafrica.com%2Fb&sa=D&sntz=1&usg=AOvVaw2XGrs10M8_WhEUW7JKjRoP#?bb=AV1HKARLRRYcGwAPFxI4DxkNQFYzWQ1JFRU
Captured page Enlarge ↗ SignIn Now via refqTCkRDAPOAFe5KAPajCcWydtrb
Final URL Different hostname
https://morning-sky-c345.iqsluwmhmb95cmb.workers.dev/0x69b19b8be8bfb5d41f021393/om/AV1HKARLRRYcGwAPFxI4DxkNQFYzWQ1JFRU

Detection highlights

URLQuery 2IDS 1TDS 0
View detections →

Infrastructure & activity

United States 142.251.156.119United States AS15169 GOOGLE
Hosts
8
Requests
23
Received
1.56 MB
Sent
14.9 KB
Inspect network →

Notable observed hosts

5 more · View hosts →
Report tags
phishing microsoft outlook
Open report →

www.gwenet.org

http://www.gwenet.org/office/
Captured page Enlarge ↗ Sign in to your account

Detection highlights

URLQuery 2IDS 3TDS 5
5 more findings · View detections →

Infrastructure & activity

Canada 66.175.58.9Canada AS30447 INFB2-AS
Hosts
4
Requests
18
Received
591.4 KB
Sent
8.0 KB
Inspect network →

Notable observed hosts

1 more · View hosts →
Report tags
microsoft phishing
Submit tags
openphish
Open report →

www.gwenet.org

http://www.gwenet.org/office/
Captured page Enlarge ↗ Sign in to your account

Detection highlights

URLQuery 2IDS 2TDS 5
5 more findings · View detections →

Infrastructure & activity

Canada 66.175.58.9Canada AS30447 INFB2-AS
Hosts
4
Requests
18
Received
706.0 KB
Sent
8.0 KB
Inspect network →

Notable observed hosts

1 more · View hosts →
Report tags
microsoft phishing
Submit tags
openphish
Open report →
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot