Report Overview

  1. Submitted URL

    shorturl.at/bcoq7

  2. IP

    104.26.9.129

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2024-04-24 11:02:45

    Access

    public

  4. Website Title

    Sign in to your account

  5. Final URL

    login.microsoftonline.com/1b16ab3e-b8f6-4fe3-9f3e-2db7fe549f6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B616812FDC291B4130F5C7E83A298147D784B0CF16EBD808%2D0FF0F95980711B537181C3F372936C4394DD20E977271D4059C8D76F1CB6C6E2&redirect%5Furi=https%3A%2F%2Fhexmet%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=231f22a1%2Dd07c%2D8000%2Db597%2De5b8a4affaab

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
hexmet.sharepoint.com709690unknownNo dataNo data
aadcdn.msftauth.net1455unknown2018-11-192024-04-23
login.live.com791994-12-282012-05-212024-04-22
aadcdn.msftauthimages.net46222018-11-122019-08-142024-04-22
aadcdn.msauth.net14212018-10-252018-11-192024-04-22
www.shorturl.at196091unknown2017-01-182024-04-24
login.microsoftonline.com252002-07-092017-02-192019-07-18
autologon.microsoftazuread-sso.com15342016-07-222017-01-302024-04-24
eu-mobile.events.data.microsoft.comunknown1991-05-022021-09-302024-04-23
shorturl.at83420unknown2016-11-122024-04-20

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (183)

HTTP Transactions (29)

URLIPResponseSize
shorturl.at/
104.26.8.129 167 B
www.shorturl.at/bcoq7
104.26.8.129302 Found338 B
hexmet.sharepoint.com/sites/MI-GlobalMarketingLeadership/_layouts/15/doc2.aspx?sourcedoc=%7B68A30F14-105B-4264-A418-5B1F87678CE9%7D&file=Landing%20Page%20content.docx&action=default&mobileredirect=true
52.105.131.53302 Found449 B
hexmet.sharepoint.com/sites/MI-GlobalMarketingLeadership/_layouts/15/Authenticate.aspx?Source=%2Fsites%2FMI%2DGlobalMarketingLeadership%2F%5Flayouts%2F15%2Fdoc2%2Easpx%3Fsourcedoc%3D%257B68A30F14%2D105B%2D4264%2DA418%2D5B1F87678CE9%257D%26file%3DLanding%2520Page%2520content%2Edocx%26action%3Ddefault%26mobileredirect%3Dtrue
52.105.131.53302 Found533 B
hexmet.sharepoint.com/_forms/default.aspx?ReturnUrl=%2fsites%2fMI-GlobalMarketingLeadership%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fsites%252FMI%252DGlobalMarketingLeadership%252F%255Flayouts%252F15%252Fdoc2%252Easpx%253Fsourcedoc%253D%25257B68A30F14%252D105B%252D4264%252DA418%252D5B1F87678CE9%25257D%2526file%253DLanding%252520Page%252520content%252Edocx%2526action%253Ddefault%2526mobileredirect%253Dtrue&Source=cookie
52.105.131.53302 Found877 B
login.microsoftonline.com/1b16ab3e-b8f6-4fe3-9f3e-2db7fe549f6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B616812FDC291B4130F5C7E83A298147D784B0CF16EBD808%2D0FF0F95980711B537181C3F372936C4394DD20E977271D4059C8D76F1CB6C6E2&redirect%5Furi=https%3A%2F%2Fhexmet%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=231f22a1%2Dd07c%2D8000%2Db597%2De5b8a4affaab
20.190.181.2200 OK15 kB
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css
152.199.23.37200 OK20 kB
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_l2bvdjfwt697xziuhxpwsg2.js
152.199.23.37200 OK16 kB
aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_jHSrlUosdD1xxbmcR_lMNA2.js
152.199.23.37200 OK121 kB
aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
152.199.23.37200 OK61 kB
aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
152.199.23.37200 OK17 kB
aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js
152.199.23.37200 OK54 kB
aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_4d4b76a02ae121e3b20c.js
152.199.23.37200 OK5.5 kB
aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
152.199.23.37200 OK3.6 kB
aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
152.199.23.37200 OK2.7 kB
login.live.com/Me.htm?v=3
20.190.177.82200 OK1.1 kB
autologon.microsoftazuread-sso.com/1b16ab3e-b8f6-4fe3-9f3e-2db7fe549f6a/winauth/iframe?client-request-id=231f22a1-d07c-8000-b597-e5b8a4affaab&isAdalRequest=False
20.190.177.146200 OK7.2 kB
aadcdn.msftauthimages.net/c1c6b6c8-6osl4yb9v6qnqurft5xjwkoc2-ucdrwfd1nplxpbdo/logintenantbranding/0/illustration?ts=635762888649526854
13.107.213.53200 OK30 kB
aadcdn.msftauthimages.net/c1c6b6c8-6osl4yb9v6qnqurft5xjwkoc2-ucdrwfd1nplxpbdo/logintenantbranding/0/bannerlogo?ts=635828506799698794
13.107.213.53200 OK3.2 kB
aadcdn.msauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
13.107.213.53 40 kB
aadcdn.msauth.net/ests/2.1/content/cdnbundles/dsso.iframe.min_ola-etxskuesqyfim_hgua2.js
13.107.213.53 4.4 kB
autologon.microsoftazuread-sso.com/1b16ab3e-b8f6-4fe3-9f3e-2db7fe549f6a/winauth/sso?client-request-id=231f22a1-d07c-8000-b597-e5b8a4affaab&_=1713956546340
20.190.177.146 32 B
login.microsoftonline.com/common/instrumentation/dssostatus
20.190.181.2200 OK265 B
aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js
152.199.23.37200 OK36 kB
aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
152.199.23.37200 OK621 B
eu-mobile.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
20.50.73.9200 OK0 B
eu-mobile.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
20.50.73.9200 OK153 B
shorturl.at/bcoq7
104.26.8.129301 Moved Permanently41 kB
hexmet.sharepoint.com/:w:/r/sites/MI-GlobalMarketingLeadership/_layouts/15/Doc.aspx?sourcedoc=%7B68A30F14-105B-4264-A418-5B1F87678CE9%7D&file=Landing%20Page%20content.docx&action=default&mobileredirect=true
52.105.131.53302 Found41 kB