Report Overview

  1. Submitted URL

    pub-4d7d8582319341bab4de01da24967d41.r2.dev/kingdomknowestzoonds-mfaauthplans.html

  2. IP

    104.18.2.35

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2023-12-04 00:51:39

    Access

    public

  4. Website Title

    Sign in to Outlook

  5. Final URL

    pub-4d7d8582319341bab4de01da24967d41.r2.dev/kingdomknowestzoonds-mfaauthplans.html

  6. urlquery detections

    Phishing - Microsoft Outlook

Detections

  1. urlquery

    4

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
aadcdn.msauth.net14212018-10-252018-11-192023-12-03
pub-4d7d8582319341bab4de01da24967d41.r2.devunknown2022-08-232023-12-012023-12-01
news-wavylevelllersjdjdifastforrrwa.cloudunknown2023-12-012023-12-012023-12-01
cdnjs.cloudflare.com2352009-02-172015-04-172023-12-03
code.jquery.com6342005-12-102012-05-212023-12-03

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish
SeverityIndicatorAlert
mediumpub-4d7d8582319341bab4de01da24967d41.r2.dev/kingdomknowestzoonds-mfaauthplans.htmlOffice365

PhishTank
SeverityIndicatorAlert
mediumpub-4d7d8582319341bab4de01da24967d41.r2.dev/kingdomknowestzoonds-mfaauthplans.htmlOther

Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (8)

HTTP Transactions (11)

URLIPResponseSize
pub-4d7d8582319341bab4de01da24967d41.r2.dev/kingdomknowestzoonds-mfaauthplans.html
104.18.2.35200 OK22 kB
news-wavylevelllersjdjdifastforrrwa.cloud/kingdomnowest/host2.4/admin/js/sc.php
62.72.24.13200 OK938 B
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
104.17.24.14200 OK14 kB
code.jquery.com/jquery-3.1.1.min.js
151.101.130.137200 OK30 kB
pub-4d7d8582319341bab4de01da24967d41.r2.dev/favicon.ico
104.18.2.35404 Not Found6.5 kB
news-wavylevelllersjdjdifastforrrwa.cloud/kingdomnowest/host2.4/72c2caf.php
62.72.24.13200 OK437 kB
code.jquery.com/jquery-3.1.1.min.js
151.101.130.137200 OK30 kB
aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_b59c16ca9bf156438a8a96d45e33db64.svg
13.107.213.53200 OK2.4 kB
aadcdn.msauth.net/shared/1.0/content/images/picker_verify_call_fe87496cc7a44412f7893a72099c120a.svg
13.107.213.53200 OK1.2 kB
aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_27a6d18b56f46818420e60a773c36d4e.svg
13.107.213.53200 OK199 B
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css
104.17.24.14200 OK37 kB