Skip to main content
Sandfish

Sign in to your account

https://login.microsoftonline.com.isasecuritylabs.defau…

WACZ
Group180d490c-fbad-4a29-b3a8-a453ea8e593bsubmitted urlMember 1

Case summary

The target, observed result, and important findings.

Status
Current evaluation
Findings
1High
Impersonated brand
MicrosoftOther cases impersonating Microsoft Search for this value.
Submitted URL
http://login.microsoftonline.com.isasecuritylabs.default.isacyberseccuritylabs.myshn.net/ Search for this value.
Final URL
https://login.microsoftonline.com.isasecuritylabs.default.isacyberseccuritylabs.myshn.net/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com.isasecuritylabs.default.isacyberseccuritylabs.myshn.net%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com.isasecuritylabs.default.isacyberseccuritylabs.myshn.net%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639253157029696513.OGMwYzg4OTItOWMzNS00YjAxLTlhNzAtZjQ4Y2UwNGVhMGEzMDkwMTQzMTctNzliNS00NmQxLTg0MTYtNmRhOGFlNTI2Nzlm&ui_locales=en-US&mkt=en-US&client-request-id=af581780-cd63-4c5f-9aac-911e314a5e00&siwa=1&siwg=1&state=xhwlPreon8Dpf5GiGet9x4rNwHiuC7rOLvQFQFGSyAnez2SopCYNUHWO-yOuOD5nKL2pnx336lgNQH9Rg__PBY5U5aUNz4TvbS7Z3KiInG40k-8U6gp9kP7AL7ug5c5R_XePeBlHQJ5e83QfqAcgAbksP7TKxtS-ZhTeXa9-nb-Gr66PFJvlyhOjIplJfgJphPHEKO21eii3bKDT3C1y63-zwOLJ9ot9iZiY2TKH4TCTFrbVBqoLZuBkgCXTnXtkBpc-9wXvGa5GuLzFkWEOvOBpxQxtGnFpwXS17nl5tV8ufhlXZugvr6sn9wz0DirSGWfZRQo0-BxKumJ5ETlQHpu-4lqt2UHRH5tWM-glxjqj2OxNHd5RxvDlFyvsMt-5eQt0adkDiyJJ424MUx5MlNU-4iFBLEcPMp4srZmdnMAMQN9Hmz8vfWUDw64shR47&x-client-SKU=ID_NET8_0&x-client-ver=8.16.0.0 Search for this value.0
Domain registration
myshn.netMore than 90 days oldRegistered 2012-06-12 · Registrar CSC Corporate Domains, Inc.
Language
Detecting...
Network
35 requests across 7 hosts
Favicon
90cdaf48…b8c6cd21 Search for this value.
Infrastructure
Loading...
Behavior
0 recorded events
Interaction
4 actions · 1 submission · stopped: no fillable controls
  1. 1. fillsucceededemail | loginfmt | | Email, phone, or Skype
  2. 2. submitsucceededNext
  3. 3. clicksucceededSign-in options
  4. 4. clicksucceededFace, fingerprint, PIN or security key Use your device to sign in with a passkey.

Analysis metadata

How and when the analysis ran.

Input kind
url
Execution kind
capture
Duration
52.0s
Navigation
4 navigations
Engine version
0.4.0
Created
2026-09-18 08:08:12Z
Started
2026-09-18 08:08:13Z
Finished
2026-09-18 08:09:05Z
Archive
618 KB
Favicon source
html_link / favicon-v2
Analysis ID
f69e410f-13b4...

Signals by severity

Detected findings grouped by risk

Request activity

Network requests grouped by resource type

Behavior

Recorded actions grouped by type

Network contacts

Requests to the most active hosts

Request ownership

First-party and third-party requests

Response MIME types

Network responses grouped by MIME type