Report Overview

  1. Visited public
    2025-07-17 17:55:16
    Submit Tags
  2. URL

    login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7b284e94-91e1-4ee4-ae5c-45d40252b398&response_type=code&redirect_uri=https://reviewsign-docsharedeco.vercel.app/&scope=openid%20profile%20https://graph.microsoft.com/User.Read&state=tim:tim@slurpmail.net&prompt=none

  3. Finishing URL

    9hcfrxf.63641176768ab8234f981fbe.workers.dev/#Mtim%40slurpmail.net?common/oauth2/v2.0/authorize?client_id=5cc337ed-222c-0b6129af-20291b9a-6edad65d2809&locales=en

  4. IP / ASN
    40.126.53.10

    #8075 MICROSOFT-CORP-MSN-AS-BLOCK

    Title
    Continue
  5. Phishing - Rockstar2FA Phishing Kit

Detections
urlquery
4
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
reviewsign-docsharedeco.vercel.appunknown2020-01-282025-07-152025-07-15
login.microsoftonline.com252002-07-092017-02-192025-07-16
login.live.com791994-12-282012-05-212025-07-17
i.imgur.com51102009-01-092012-05-212025-07-17
botnation.ruunknown2025-06-302025-07-152025-07-15
fonts.gstatic.comunknown2008-02-112014-04-022025-07-16
aadcdn.msauth.net14212018-10-252018-11-192025-07-17
fonts.googleapis.com88772005-01-252012-05-232025-07-16
9hcfrxf.63641176768ab8234f981fbe.workers.devunknown2019-02-082025-07-152025-07-15
cdnjs.cloudflare.com2352009-02-172012-05-232025-07-16

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP 104.21.64.1

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (28)

HTTP Transactions (16)

URLIPResponseSize
GET login.microsoftonline.com/favicon.ico
0.0.0.0 0 B
GET login.live.com/Me.htm?v=3
20.190.181.2200 OK3.4 kB
GET i.imgur.com/gYg28C4.png
199.232.196.193302 Found503 B
GET botnation.ru//
104.21.88.233200 OK294 kB
GET aadcdn.msauth.net/shared/1.0/content/js/FetchSessions_Core_Wf9_2dFUKcS5ak2Iz4F-sA2.js
13.107.246.53200 OK150 kB
GET fonts.googleapis.com/css2?family=Roboto+Mono:wght@400;500&family=Inter:wght@400;600;700&display=swap
142.250.74.10200 OK12 kB
GET fonts.gstatic.com/s/robotomono/v30/L0x5DF4xlVMF-BfR8bXMIjhLq38.woff2
142.250.74.35200 OK33 kB
GET fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2
142.250.74.35200 OK48 kB
GET i.imgur.com/removed.png
199.232.196.193200 OK503 B
GET reviewsign-docsharedeco.vercel.app/favicon.ico
64.29.17.131404 Not Found79 B
GET 9hcfrxf.63641176768ab8234f981fbe.workers.dev/#Mtim%40slurpmail.net
104.21.64.1200 OK1.8 kB
GET cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
104.17.25.14200 OK90 kB
GET login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7b284e94-91e1-4ee4-ae5c-45d40252b398&response_type=code&redirect_uri=https://reviewsign-docsharedeco.vercel.app/&scope=openid%20profile%20https://graph.microsoft.com/User.Read&state=tim:tim@slurpmail.net&prompt=none
20.190.147.10200 OK22 kB
GET fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2
142.250.74.35200 OK48 kB
GET 9hcfrxf.63641176768ab8234f981fbe.workers.dev/favicon.ico
104.21.64.1200 OK1.8 kB
GET reviewsign-docsharedeco.vercel.app/?error=interaction_required&error_description=Session+information+is+not+sufficient+for+single-sign-on.&state=tim%3atim%40slurpmail.net
64.29.17.131200 OK8.4 kB