Domain > www.mcas-df.ms

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-01-01	51.103.95.227 (ClassC)

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 1923Connection: keep-aliveServer: openrestyDate: Thu, 06 Jun 2024 15:58:43 GMTX-MCAS-Request-Id: 15381302d6e35b9bf9d15bcc4746992bSet

html>head>    title>Continue/title>    script typetext/javascript>        function OnBack() {}        function DoSubmit() {            var subt  false;            if (!subt) {                subt  true;                document.hiddenform.submit();            }        }    /script>    link relicon typeimage/png hrefdata:image/png;base64,iVBORw0KGgo />/head>body>form namehiddenform idhiddenform actionhttps://login.microsoftonline.com/common/oauth2/v2.0/authorize enctypeapplication/x-www-form-urlencoded methodGET>input typehidden nameresponse_type idresponse_type valuecode />input typehidden nameresponse_mode idresponse_mode valuequery />input typehidden nameredirect_uri idredirect_uri valuehttps://login.mcas-df.ms/open_redirect_landing />input typehidden nameclient_id idclient_id value8a0c2593-9cbc-4f86-a247-beb7aab00d83 />input typehidden namescope idscope valueopenid profile email />input typehidden nameclaims idclaims value{"access_token":{"xms_cc":{"values":"cp1"}}} />input typehidden namelogin_hint idlogin_hint valueunknown />    noscript>        input typesubmit valueClick here to continue />    /noscript>/form>script srchttps://mcasproxy.cdn.mcas.ms/proxyweb/1.57.8/js/session-context-store-helper.min.js>/script>script typetext/javascript>var redirectForm  document.hiddenform;redirectForm.setAttribute(action, redirectForm.getAttribute(action) + window.location.hash);SessionContextStoreHelper.storeContextBeforeAction(https://login.mcas-df.ms/session-controls-context-restore, DoSubmit, true, %7B%22uri%22%3A%22http%3A%2F%2Fwww.mcas-df.ms%2F%22%2C%22method%22%3A%22get%22%2C%22payload%22%3A%7B%7D%2C%22queryParams%22%3A%7B%7D%7D);/script>/body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 1924Connection: keep-aliveServer: openrestyDate: Thu, 06 Jun 2024 15:58:44 GMTX-MCAS-Request-Id: 81f040bbf1c37c17ffe76bfa5aa91740Pra

html>head>    title>Continue/title>    script typetext/javascript>        function OnBack() {}        function DoSubmit() {            var subt  false;            if (!subt) {                subt  true;                document.hiddenform.submit();            }        }    /script>    link relicon typeimage/png hrefdata:image/png;base64,iVBORw0KGgo />/head>body>form namehiddenform idhiddenform actionhttps://login.microsoftonline.com/common/oauth2/v2.0/authorize enctypeapplication/x-www-form-urlencoded methodGET>input typehidden nameresponse_type idresponse_type valuecode />input typehidden nameresponse_mode idresponse_mode valuequery />input typehidden nameredirect_uri idredirect_uri valuehttps://login.mcas-df.ms/open_redirect_landing />input typehidden nameclient_id idclient_id value8a0c2593-9cbc-4f86-a247-beb7aab00d83 />input typehidden namescope idscope valueopenid profile email />input typehidden nameclaims idclaims value{"access_token":{"xms_cc":{"values":"cp1"}}} />input typehidden namelogin_hint idlogin_hint valueunknown />    noscript>        input typesubmit valueClick here to continue />    /noscript>/form>script srchttps://mcasproxy.cdn.mcas.ms/proxyweb/1.57.8/js/session-context-store-helper.min.js>/script>script typetext/javascript>var redirectForm  document.hiddenform;redirectForm.setAttribute(action, redirectForm.getAttribute(action) + window.location.hash);SessionContextStoreHelper.storeContextBeforeAction(https://login.mcas-df.ms/session-controls-context-restore, DoSubmit, true, %7B%22uri%22%3A%22https%3A%2F%2Fwww.mcas-df.ms%2F%22%2C%22method%22%3A%22get%22%2C%22payload%22%3A%7B%7D%2C%22queryParams%22%3A%7B%7D%7D);/script>/body>/html>

Subdomains

Date	Domain	IP
20minut.ua.mcas-df.ms	2024-11-03	51.103.95.227
20min.ch.mcas-df.ms	2024-11-03	51.103.95.227
com.mcas-df.ms	2025-01-01	51.103.95.227
office.com.mcas-df.ms	2023-08-26	51.103.95.227
outlook.com.mcas-df.ms	2023-08-26	51.103.95.227
protection.outlook.com.mcas-df.ms	2023-08-26	51.103.95.227
cloud-ara.tyk.io.mcas-df.ms	2025-01-01	51.103.95.227
20minutes.fr.mcas-df.ms	2025-01-01	51.103.95.227
20minutos.es.mcas-df.ms	2024-11-03	51.103.95.227
www.mcas-df.ms	2025-01-01	51.103.95.227

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.mcas-df.ms

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains