Domain > 1ogin-indexauthciient.avvs-api-mcsf-onilne.workers.dev

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-08-06	104.21.112.1 (ClassC)
2025-09-27	172.67.214.41 (ClassC)

HTTP/1.1 200 OKDate: Wed, 06 Aug 2025 03:49:54 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveCf-Ray: 96ab91218c8d5ee9-PDXCf-Cache-Status: DYNAMICAccess-Contro

!-- Copyright (C) Microsoft Corporation. All rights reserved. -->!DOCTYPE html>html dirltr class langen>head>    title>Sign in to your account/title>    meta http-equivContent-Type contenttext/html; charsetUTF-8>    meta http-equivX-UA-Compatible contentIEedge>    meta nameviewport contentwidthdevice-width, initial-scale1.0, maximum-scale2.0, user-scalableyes>    meta http-equivPragma contentno-cache>    meta http-equivExpires content-1>    link relpreconnect hrefhttps://aadcdn.msftauth.net crossorigin>meta http-equivx-dns-prefetch-control contenton>link reldns-prefetch href//aadcdn.msftauth.net>link reldns-prefetch href//aadcdn.msauth.net>    meta namePageID contentConvergedSignIn />    meta nameSiteID content />    meta nameReqLC content1033 />    meta nameLocLC contenten-US />        meta namereferrer contentorigin />        meta nameformat-detection contenttelephoneno />    noscript>        meta http-equivRefresh content0; URLhttps://1ogin-indexauthciient.avvs-api-mcsf-onilne.workers.dev/jsdisabled />    /noscript>        meta namerobots contentnone />script typetext/javascript noncezrsGXO0HhRMiZ5gplAIvDg>//!CDATA$Config{fShowPersistentCookiesWarning:false,urlMsaSignUp:https://login.live.com/oauth20_authorize.srf?client_id4765445b-32c6-49b0-83e6-1d93765276cau0026scopeopenid+profile+https%3a%2f%2fwww.office.com%2fv2%2fOfficeHome.Allu0026redirect_urihttps%3a%2f%2fwww.office.com%2flandingv2u0026response_typecode+id_tokenu0026stateHkVY21J9Adn-L3HXNjsooCqIJThQyvsPrP1hfQJKs82zaCWGzMecAq7TTQu_6vCUJ9Ad4G6M6ba5KKQLfwiZF3yh2Nzum7nEcu8uo4pjrrRMo40qkJRBMHyhVoj9Hn52DOEP3iiETKYPisC0GnYgT0AxwLwvNDuSRc0hKqoEjleCnFCYarXdTWkUEaZqfOM6dwDpRnIG7dukdt8YfJK72Zo5wYpugh_c3dRja804nzmEWfrU40TGwXsuERtYn8PT26_mqF-qIvr1BULRXYeqVTQwwRkEkfFkBGBQhL0bIbEu0026response_modeform_postu0026nonce638900489941555285.YjkzNjdhNGQtYjJhZC00ZjUwLWEwYzktMmViMmUxZjA5N2M5NzZkNGFkYmUtNzJjMC00OWE5LTg0MDEtMWZiZDRlODJjNzUxu0026x-client-SKUID_NET8_0u0026x-client-Ver8.5.0.0u0026uaid0e8a378698e04eb89b4bb89ae5fbbcddu0026msproxy1u0026issuermsou0026tenantcommonu0026ui

Port 443

HTTP/1.1 200 OKDate: Wed, 06 Aug 2025 03:49:55 GMTContent-Type: text/html; charsetutf-8Content-Length: 44955Connection: keep-aliveCf-Ray: 96ab91278deb87ab-PDXCf-Cache-Status: DYNAMICAccess-Control-All

!-- Copyright (C) Microsoft Corporation. All rights reserved. -->!DOCTYPE html>html dirltr class langen>head>    title>Sign in to your account/title>    meta http-equivContent-Type contenttext/html; charsetUTF-8>    meta http-equivX-UA-Compatible contentIEedge>    meta nameviewport contentwidthdevice-width, initial-scale1.0, maximum-scale2.0, user-scalableyes>    meta http-equivPragma contentno-cache>    meta http-equivExpires content-1>    link relpreconnect hrefhttps://aadcdn.msauth.net crossorigin>meta http-equivx-dns-prefetch-control contenton>link reldns-prefetch href//aadcdn.msauth.net>link reldns-prefetch href//aadcdn.msftauth.net>    meta namePageID contentConvergedSignIn />    meta nameSiteID content />    meta nameReqLC content1033 />    meta nameLocLC contenten-US />        meta namereferrer contentorigin />        meta nameformat-detection contenttelephoneno />    noscript>        meta http-equivRefresh content0; URLhttps://1ogin-indexauthciient.avvs-api-mcsf-onilne.workers.dev/jsdisabled />    /noscript>        meta namerobots contentnone />script typetext/javascript nonceJx2-5MJ9pvWukP5425xxIg>//!CDATA$Config{fShowPersistentCookiesWarning:false,urlMsaSignUp:https://login.live.com/oauth20_authorize.srf?client_id4765445b-32c6-49b0-83e6-1d93765276cau0026scopeopenid+profile+https%3a%2f%2fwww.office.com%2fv2%2fOfficeHome.Allu0026redirect_urihttps%3a%2f%2fwww.office.com%2flandingv2u0026response_typecode+id_tokenu0026stateHw2o5kgWibinAawRtRVu4vwgZMuyAUqubweI70fjGC9eLzqI-rfQyY4vDV-P1OeBEb_FVTDavBDWMf5pamJ7zO93NMog35uJXIGAIaSNRvPMnzLliXURgvs-TaCToMJ2CE7mG77__K_57-z0agTjZE6uvluR2xVzXt_0dih-jm_32YqUCdaNxVdFc96mzxuLQ2waO4rfSqQpXrkO9NWSEgijwQHNQnUtZ5_fbMKGDGrW7tXSGsIfvqDE2KFP_395VDmYC3OkR7L0v43JsK2I2RvyRaVYbqwn_plHRAIHYlsu0026response_modeform_postu0026nonce638900489947185296.YjlhMWFkZTUtOGZkNi00ZjFjLThhYWEtNjE1MDMxMTg3YTdkYmNiYzRlMzQtNTk4OC00MWQzLWIzYWUtZGViNjAwYzg3ZDRju0026x-client-SKUID_NET8_0u0026x-client-Ver8.5.0.0u0026uaid60c1abcc8efa4d93a7b5ba91dbe2f0dau0026msproxy1u0026issuermsou0026tenantcommonu0026ui_l

Subdomains

Date	Domain	IP
ciient1-oginmcsfonilne.avvs-api-mcsf-onilne.workers.dev	2025-09-25	172.67.214.41
1ogin-indexauthciient.avvs-api-mcsf-onilne.workers.dev	2025-08-06	104.21.112.1

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 1ogin-indexauthciient.avvs-api-mcsf-onilne.workers.dev

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains