Report Overview

  1. Submitted URL

    secure2.xactlycorp.com/xlsweb/login.do?startPage=url:=:loadWorkflowApprovalApp.do:::params:=:tokenId:;:7e29016b27da4236aec76b5045cb7114:_:approvalResourceInstanceId:;:8a13822b8e6948a8018ed2d0608d621f:_:documentInstanceId:;:E37B0A926739419A8289DA595F068D93:::isApp:=:true

  2. IP

    96.6.19.172

    ASN

    #16625 AKAMAI-AS

  3. Submitted

    2024-04-16 17:34:00

    Access

    public

  4. Website Title

    Sign in to your account

  5. Final URL

    login.microsoftonline.com/1b16ab3e-b8f6-4fe3-9f3e-2db7fe549f6a/saml2

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ok12static.oktacdn.com300472014-11-112022-12-012024-04-10
login.microsoftonline.com252002-07-092017-02-192019-07-18
aadcdn.msauth.net14212018-10-252018-11-192024-04-16
login.live.com791994-12-282012-05-212024-04-16
autologon.microsoftazuread-sso.com15342016-07-222017-01-302024-04-15
secure2.xactlycorp.com464934unknownNo dataNo data
auth.xactlycorp.com2779822005-01-122021-04-022023-09-28
aadcdn.msauthimages.net47952018-11-122019-08-142024-04-16
eu-mobile.events.data.microsoft.comunknown1991-05-022021-09-302024-04-14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (183)

HTTP Transactions (26)

URLIPResponseSize
secure2.xactlycorp.com/xlsweb/login.do?startPage=url:=:loadWorkflowApprovalApp.do:::params:=:tokenId:;:7e29016b27da4236aec76b5045cb7114:_:approvalResourceInstanceId:;:8a13822b8e6948a8018ed2d0608d621f:_:documentInstanceId:;:E37B0A926739419A8289DA595F068D93:::isApp:=:true
96.6.19.172 925 B
auth.xactlycorp.com/oauth2/ausprr25gbOe42lUm5d6/v1/authorize?response_type=code&client_id=0oa4y499qr6BJtc845d7&scope=openid%20email%20profile%20offline_access&state=67B8A500A46558F8452FC7D4A57FC3EB6BAF2F154924739D95CFD2E81DD1A5FD0D102C0079D1CE6949F88DBB99F8FD721A62F161E3F628D57306F33218E8B49D09390183EF555D11BA6E5134D871AC676C31F3B6D03B11F33A89FA047878D3665008B5378885AFAB8B190748130E343CF489D9EAAC78314DC6341474E1ED938507EA1F35B4610A1BAC1B20C444D95114;false;_;url__PA__loadWorkflowApprovalApp.do__TC__params__PA__tokenId__PAV__7e29016b27da4236aec76b5045cb7114__PAS__approvalResourceInstanceId__PAV__8a13822b8e6948a8018ed2d0608d621f__PAS__documentInstanceId__PAV__E37B0A926739419A8289DA595F068D93__TC__isApp__PA__true&redirect_uri=https://secure2.xactlycorp.com/iam/saml/auth/INCENT_LOGIN_PAGE&nonce=8D27604E025B53AE4D1D86D0&idp=0oa7ad0026MEVNI4z5d7
35.71.149.114 4.8 kB
ok12static.oktacdn.com/assets/css/sections/interstitial.c280c95e9e8c971dad6d6dd597ab23f8.css
54.230.111.27 6.0 kB
ok12static.oktacdn.com/assets/img/icons/favicons/favicon-16x16.f0b05bcfd77a98675f317ee53d12da9b.png
54.230.111.27 496 B
login.microsoftonline.com/1b16ab3e-b8f6-4fe3-9f3e-2db7fe549f6a/saml2
20.190.177.148200 OK15 kB
aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pxjdzrjcwtmbr-ntjn_f8q2.js
13.107.213.53200 OK16 kB
aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css
13.107.213.53200 OK20 kB
aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_xtPRDEy3EhlAdpju-Ah7qw2.js
13.107.213.53200 OK121 kB
aadcdn.msauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
13.107.213.53200 OK61 kB
aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
13.107.213.53200 OK17 kB
aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js
13.107.213.53200 OK54 kB
aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_4d4b76a02ae121e3b20c.js
13.107.213.53200 OK5.5 kB
aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
13.107.213.53200 OK2.7 kB
aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
13.107.213.53200 OK3.6 kB
login.live.com/Me.htm?v=3
20.190.177.20200 OK1.1 kB
aadcdn.msauthimages.net/c1c6b6c8-6osl4yb9v6qnqurft5xjwkoc2-ucdrwfd1nplxpbdo/logintenantbranding/0/bannerlogo?ts=635828506799698794
152.199.21.175200 OK3.2 kB
aadcdn.msauthimages.net/c1c6b6c8-6osl4yb9v6qnqurft5xjwkoc2-ucdrwfd1nplxpbdo/logintenantbranding/0/illustration?ts=635762888649526854
152.199.21.175200 OK30 kB
autologon.microsoftazuread-sso.com/1b16ab3e-b8f6-4fe3-9f3e-2db7fe549f6a/winauth/iframe?client-request-id=8526646c-aa90-451d-80b5-9fb03a9c18dd&isAdalRequest=False
20.190.181.1200 OK7.2 kB
aadcdn.msauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
13.107.213.53 40 kB
aadcdn.msauth.net/ests/2.1/content/cdnbundles/dsso.iframe.min_ola-etxskuesqyfim_hgua2.js
13.107.213.53 4.4 kB
autologon.microsoftazuread-sso.com/1b16ab3e-b8f6-4fe3-9f3e-2db7fe549f6a/winauth/sso?client-request-id=8526646c-aa90-451d-80b5-9fb03a9c18dd&_=1713288818101
20.190.181.1 32 B
login.microsoftonline.com/common/instrumentation/dssostatus
20.190.177.148200 OK265 B
aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js
13.107.213.53200 OK36 kB
aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
13.107.213.53200 OK621 B
eu-mobile.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
52.178.17.233200 OK0 B
eu-mobile.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
52.178.17.233200 OK153 B