WEBSITE ANALYSIS REPORT

https://angolalng-co.uk/?scpybwyj&email=alex.k.cheung@asia.bnpparibas.com

31 Mar 2026 · 11:23:43.000 UTCpublic

Report tags: phishing microsoft outlook nakedpages aitm
Submit tags

Request review

Phishing detected

3 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

11:23:20.089 GET 302 document 49.8 KB 2151 ms 1 alerts

11:23:22.002 GET 302 document 49.8 KB 913 ms 2 alerts

11:23:22.582 GET 200 document 49.8 KB 1672 ms 2 alerts

11:23:24.428 GET 200 stylesheet 111.5 KB 686 ms 2 alerts

11:23:24.430 GET 200 script 724.0 KB 1030 ms 2 alerts

11:23:24.431 GET 200 script 60.4 KB 699 ms 2 alerts

11:23:25.324 GET 200 script 185.7 KB 229 ms 2 alerts

11:23:25.447 POST 200 csp 2 B 450 ms —

11:23:25.448 POST 200 csp 2 B 391 ms —

11:23:25.450 POST 200 csp 2 B 461 ms —

11:23:25.451 POST 200 csp 2 B 341 ms —

11:23:25.454 POST 200 csp 2 B 540 ms —

11:23:25.455 POST 200 csp 2 B 520 ms —

11:23:25.456 POST 200 csp 2 B 465 ms —

11:23:25.459 GET 200 img 16.8 KB 411 ms 2 alerts

11:23:25.939 GET 200 script 397.9 KB 935 ms 2 alerts

11:23:26.002 GET 404 subdocument 1.2 KB 333 ms —

11:23:26.791 GET 200 script 11.4 KB 613 ms 2 alerts

Transaction #13

Request / response

URL

GET HTTPS

https://ontariosocer.net/aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pconfirmsend_a4edb1ba229b22e6bb72.js

IP / ASN

23.94.153.153

AS36352 · AS-COLOCROSSING

Requested by: https://ontariosocer.net/?qrc=alex.k.cheung%40asia.bnpparibas.com

Resource information

File type: JavaScript source, ASCII text, with very long lines (10707)
MIME type: application/x-javascript
First seen (UTC): 05 Mar 2026 · 23:53:06.004 UTC
Last seen (UTC): 06 Oct 2026 · 13:45:21.581 UTC
Times seen: 3

Size: 11.4 KB (11680 bytes)
MD5: 2dbe2c8bdde63ceb6603c90654dc2330
SHA1: a904d375d29e9d0944774212659e41dfaf182c37
SHA256: 6a046defe228317842615598accbab3339ac21962c9c9d990a1b237ec48f0d5d

Certificate information

Issuer: Let's Encrypt · R13
Subject: ontariosocer.net
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 76:DD:58:D8:D3:85:10:8A:49:4E:A1:BF:EE:B1:E0:EE:78:C9:EC:22
Valid from: Mon, 30 Mar 2026 00:17:36 GMT
Valid until: Sun, 28 Jun 2026 00:17:35 GMT

Technology fingerprints

Azure Front Door (Load balancers)
Azure (PaaS)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Phishing - Microsoft Outlook	medium	Phishing
urlquery Phishing - NakedPages Phishing Kit	high	Phishing

HTTP headers

Request headers

GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pconfirmsend_a4edb1ba229b22e6bb72.js HTTP/1.1
Host: ontariosocer.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ontariosocer.net/?qrc=alex.k.cheung%40asia.bnpparibas.com
DNT: 1
Connection: keep-alive
Cookie: qPdM=WMBpjZCfDkdp; qPdM.sig=-3KOsBASm-URAjExauLLaXZwgPo; buid=1.AXcAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYAAAB3AA.AQABGgEAAACvnsHKEvvRQb3Bz3Qc7wnaRXZvU3RzQXJ0aWZhY3RzAwAAAAAAajeGN87fllvv3hsj0j4HPSJHj0Iwq720y6WGy0c0Nk-UrcP5U4e9BPPnFhNfFzjn2YaVWxQRe86ARXla40mVBDG7Kg57es585t-Bw94P0ZggAA; esctx=PAQABBwEAAACvnsHKEvvRQb3Bz3Qc7wnaRXZvU3RzQXJ0aWZhY3RzDQAAAAAA43_95E5mgfzW_vacGFuGthR7agg-X07_NmuTrcmw6IaWZl8iL_aT8anIQO7aUQPwyDSzCYzJM7okmL6Vqq4wPWocEGfhnluo68jbMZkN0aGiQehr6XpHD-QiHbgk3hurdVnIqCOvXq8V7706bW8_4dojzftqj2A_uknqqH7xYkEgAA; esctx-j4AdtcLzpmg=AQABCQEAAACvnsHKEvvRQb3Bz3Qc7wnaRXZvU3RzQXJ0aWZhY3RzDQAAAAAAdk6sp-bdswXGJIcJDbEut3TIff1OCzqOanPeS8pMABa88OLt4fXKLTJZAp8qZ0JS9ysOqhLwk2coreg6KO5gAzeNAtMzLswMUV24cADqfQuAl-3RRoEAJ-FaYSu8Szp2R8FAer0QGDJ3YidEwm5yICAA; fpc=AiOEzQ7oWcNCtVycjsPQEVa4vjNwAQAAAKqlXeEOAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; brcap=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Date: Tue, 31 Mar 2026 11:23:27 GMT
Content-Type: application/x-javascript
Connection: close
Cache-Control: public, max-age=31536000
Content-Encoding: gzip
Last-Modified: Fri, 30 Jan 2026 20:22:27 GMT
ETag: 0x8DE603D49647EFD
x-ms-request-id: fa72c00d-a01e-0071-3f7b-bc1ad0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
Access-Control-Allow-Origin: *
x-azure-ref: 20260331T112327Z-184d949d4942z6q9hC1YTOv5fs0000000bu0000000000fkh
x-fd-int-roxy-purgeid: 0
X-Cache-Info: L1_T2
X-Cache: TCP_HIT
Accept-Ranges: bytes
Content-Security-Policy: default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval';  script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
Transfer-Encoding: chunked

11:23:26.793 GET 200 img 2.6 KB 607 ms 2 alerts

11:23:26.795 GET 200 img 3.5 KB 603 ms 2 alerts

11:23:27.266 GET 200 img 172.7 KB 227 ms —

11:23:27.273 GET 200 img 3.7 KB 226 ms —

https://angolalng-co.uk/?scpybwyj&email=alex.k.cheung@asia.bnpparibas.com

Domain graph

Hostnames

Connections

Network requests

Transaction #13

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://angolalng-co.uk/?scpybwyj&email=alex.k.cheung@asia.bnpparibas.com

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #13

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://angolalng-co.uk/?scpybwyj&email=alex.k.cheung@asia.bnpparibas.com

Domain graph

Network requests