Microsoft
https://layer3-delivery.carpitg.workers.dev/s/xyz?error=login_required&error_description=aadsts50058%3a+a+silent+sign-in+request+was+sent+but+no+user+is+signed+in.+trace+id%3a+995735a8-565b-4694-af41-3802d5863c00+correlation+id%3a+4c0e9f98-4cb8-4bbc-833f-38ffc9322780+timestamp%3a+2026-06-23+18%3a52%3a25z&error_uri=https%3a%2f%2flogin.microsoftonline.com%2ferror%3fcode%3d50058&_ref=gulp27cfqvhxuvkpvpiwdr-caoksezxsdl9xar2295i&_sid=0f7514a6-8c2a-499a-8ef1-f85f61e6d070&_ts=1782240745314&_nc=368ulzgr415 Access site
Screenshot
Screenshot of layer3-delivery.carpitg.workers.dev
Investigate
Domain layer3-delivery.carpitg.workers.dev1 CT host on apex
urlscan page.domain VirusTotal Whois
IP 172.67.157.95
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://layer3-delivery.carpitg.workers.dev/s/xyz?error=log…
urlscan Wayback archive.today
Cert E7
crt.sh Censys Google CT
WHOIS
Registrar CloudFlare, Inc.
Network
IP 172.67.157.95
Country United StatesUnited States
Hosting Cloudflare, Inc.
ASN AS13335
TLS Cert E7
Detection PhishTank
CleanGoogle Safe Browsing · OpenPhish · TweetFeed · urlscan.io
Phishunt 26 low Keyword matchLong domainPhishTank Beta
Report this phishing
PaaS platform Cloudflare Workers
Web form
Registrar CloudFlare, Inc.
registrar-abuse@cloudflare.com
Brand owner Microsoft
phish@office365.microsoft.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank

Tracked from 2026-06-23 22:00 UTC  ·  Last refreshed 2026-06-24 01:30 UTC