WEBSITE ANALYSIS REPORT
https://login.secure-crossriver.com/bZpEBFBm?uid=4c9c93df-f92e-4068-ae84-1251b8d4417d
public
Phishing detected
Review evidence →6 detections · review the detection signals
Indicators
Exact observed values · repeated evidence is grouped by type and value
| Kind | Value | Signals | Copy |
|---|---|---|---|
| IP | 16.52.153.229 | URLQuery 9IDS 0TDS 6 | |
| Domain | msauth.net | URLQuery 0IDS 0TDS 0 | |
| Domain | secure-crossriver.com | URLQuery 9IDS 0TDS 6 | |
| FQDN | aadcdn.msauth.net | URLQuery 0IDS 0TDS 0 | |
| FQDN | login.secure-crossriver.com | URLQuery 8IDS 0TDS 4 | |
| FQDN | www.secure-crossriver.com | URLQuery 1IDS 0TDS 2 | |
| URL | https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_pzfy2abhlubh6bv_dyvwha2.css | URLQuery 0IDS 0TDS 0 | |
| URL | https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_uhq9m5ofgcbvjcqhlkybyw2.js | URLQuery 0IDS 0TDS 0 | |
| URL | https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico | URLQuery 0IDS 0TDS 0 | |
| URL | https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_0VaiIU2YQ2Ha0HQI5MKqTQ2.js | URLQuery 0IDS 0TDS 0 | |
| URL | https://login.secure-crossriver.com/ | URLQuery 2IDS 0TDS 1 | |
| URL | https://login.secure-crossriver.com/bZpEBFBm?uid=4c9c93df-f92e-4068-ae84-1251b8d4417d | URLQuery 2IDS 0TDS 1 | |
| URL | https://login.secure-crossriver.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639282441708714103.NGNkYjIxMTEtNzZkYy00MjUyLTkwZWUtMjFkZTMyZjQ3NjJiODQ1YjI0NjMtNGRlZi00ODgwLThhMWQtOGQ5MDYyN2IzODA4&ui_locales=en-US&mkt=en-US&client-request-id=7f9ff6a4-b6d6-4220-bfa8-37564a5ed0c1&siwa=1&siwg=1&state=t8EaNH5tNdCzd8sTrcuR_JcJ5OmkXgE8ntfiCFRuu_vFce2pW5t_iZk-IKSU2eBTuBOWgy8jPyLeh6okoDIvf3mGcaJcH_zIvyyZgTU5zLOFjBW94cuerhVOLQM61Ud48b2CkHr6hS603U-AZGqFY8oO7b5loi0VUTH8zwyWFZ3ZNLjDooEhWIJdiWRIWsX-O4ZkQrgi86NvXZPSoOixnu0Mz3-vzTvp0zFFChrFSixDZ2rma1Pz5GaLrlFGMmtuuAjesofmDYv1Yi55Uk05yy98sZJZzhE9A4SR7K9iU6tus83iM8RDX8Sk4qZIownIxS-WA4erKHvmof9eCbl-SA6xd6z8SMTOYlEYgzrXdqGc9lZ9OJKKDVM3a6NtlQcTw-HA5tGnh6Ooplyta4qouCHhhLq7tXY1cIJb5AVwz3OhpysG17-T3ncfWBF6k1ee&x-client-SKU=ID_NET8_0&x-client-ver=8.16.0.0 | URLQuery 2IDS 0TDS 1 | |
| URL | https://login.secure-crossriver.com/s/63fb0d8f1f45e3e46f5760d79bf9dd7fdae605107e30353b79aa42c7218d6aeb.js | URLQuery 2IDS 0TDS 1 | |
| URL | https://www.secure-crossriver.com/login | URLQuery 1IDS 0TDS 2 | |
| SHA256 | 2a7e5ce46336c26297c307e448e9b7a4aad2f423f62da1820fa89fa4c0ad7692 | URLQuery 2IDS 0TDS 1 | |
| SHA256 | 3e8981197a276314d1ff818eb991ddefda1fef7679577ba772f40d832425edf3 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 8f9ff26359838489cb01b5f1f91eeffcdbb8f679159caf90d6aff2db290bda8b | URLQuery 2IDS 0TDS 1 | |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 | URLQuery 5IDS 0TDS 4 |
No indicators match the current filters.