NetCrafters OU

Hosting provider · suspicious phishing activity

URLs

Unique IPs

Brands targeted

ASN: AS203273 (2)

This is the organization that the IP addresses of these detections are registered to, typically a hosting provider, CDN, or ISP. Phishing on an organization's network usually reflects abuse of its services rather than involvement by the company itself.

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC)	First seen (UTC) ▾	URL	Screenshot	Flags	Details
2026-11-09 05:30	2026-11-08 17:21	https://login.microsoft-auth365.com		GSB	Details
2026-11-09 05:30	2026-11-08 17:21	https://microsoft-auth365.com		GSB	Details

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL	Screenshot	Details
https://login.microsoft-auth3… GSB		Details
https://microsoft-auth365.com GSB		Details