Microsoft
https://login.vingroup.work/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3a%2f%2fm365.cloud.microsoft%2flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3a%2f%2fwww.office.com%2fv2%2fofficehome.all&response_mode=form_post&nonce=639171995274839082.ogy4ntbhyjytzmmxys00ytlkltllotktntzjntizmzg1ogfimtuzzdmzn2mtndkymi00nda0ltk4ywitzmuxogvimjnjndc0&ui_locales=cs&mkt=cs&client-request-id=b0f57425-8ea4-490e-97f6-745f6af05f04&state=qx7pmmsxbqhc7zdyn3didbxqparek9dalpidvbcosa6rpilxb_hloe69_ixrrq1wy-fznycn9pttw1bttqesilwicsbhqesojrr29uqoahopygxsfdhwpcg-j2ts5l32u_gnttftx9boqpw8bzs0qc6nihg0hwl0ti6e87plm9xmoim1fnmv-id_scitj2vkarhvqt22n5tibpynqtochvlbo_u2_2vr37zc-sdtmmav_v5b2v8bem6r10_9t4gmrqs1_a2xxkdji67ibcaw_krhok8myxtfeqcotjhbdgkcfddm1gdwyikj6roqbxfn5ykh4s7zirgt0ritfznem4xpp_-j-2hdfjrxg-doyowda6xjsqzzuf1hqwrque7-zth1irc6yslp2c6xu1sr2mowcbgf8b1l9b7l1ibnzk-crvbvkxapdercgplwqsogn8n535pcq6taxfdmhkuxroyitd4mcogmndv8qpj5x40&x-client-sku=id_net8_0&x-client-ver=8.14.0.0 Access site
Screenshot
Screenshot of login.vingroup.work
Investigate
Domain login.vingroup.work62 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 172.67.217.29
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://login.vingroup.work/common/oauth2/v2.0/authorize?cl…
urlscan Wayback archive.today
Cert E7
crt.sh Censys Google CT
WHOIS
Registrar NameCheap, Inc.
Network
IP 172.67.217.29
Country United StatesUnited States
Hosting Cloudflare, Inc.
ASN AS13335
TLS Cert E7
Detection PhishTank
CleanGoogle Safe Browsing · OpenPhish · TweetFeed · urlscan.io
Phishunt 19 noise Keyword matchPhishTankcsp missing Beta
Report this phishing
Network / ASN Cloudflare, Inc.
Web form
Registrar NameCheap, Inc.
abuse@namecheap.com Web form
Brand owner Microsoft
phish@office365.microsoft.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank

Tracked from 2026-06-16 11:01 UTC  ·  Last refreshed 2026-06-24 01:30 UTC