Report Overview

  1. Visited public
    2023-11-20 18:50:37
  2. URL

    og-development.com/nap/napp/XvOiX/bWlrZUBwYnNjb3B5LmNvbQ==

  3. Finishing URL

    wryglgcufm.here2si.ru/342nb/#mike@pbscopy.com

  4. IP / ASN
    69.49.245.172

    #46606 UNIFIEDLAYER-AS-1

    Title
    Sign in to your Microsoft account
  5. Phishing - Microsoft Outlook

Detections
urlquery
4
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
adfs.heart.orgunknown1995-01-122016-10-10 20:42:572023-11-20 03:49:53
code.jquery.com6342005-12-102012-05-21 19:28:022023-11-19 18:17:44
og-development.comunknown2019-05-012019-05-03 23:03:132023-07-25 19:27:01
aadcdn.msftauth.net14552018-10-252018-11-19 11:50:322023-11-19 18:14:17
logincdn.msauth.net23302018-10-252019-04-23 03:13:282023-11-20 05:31:50
challenges.cloudflare.comunknown2009-02-172021-10-20 07:02:032023-11-19 21:12:47
httpbin.org3529752011-06-122013-07-23 00:01:272023-11-20 07:00:03
cdn.socket.io620682010-04-182015-03-23 23:14:032023-11-19 19:45:11
wryglgcufm.here2si.ruunknown2023-11-142023-11-15 18:44:482023-11-18 18:59:18

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (15)

HTTP Transactions (48)

URLIPResponseSize
og-development.com/nap/napp/XvOiX/bWlrZUBwYnNjb3B5LmNvbQ==
69.49.245.172 0 B
GET wryglgcufm.here2si.ru/342nb/myscr338595.js
104.21.92.215200 OK39 kB
GET wryglgcufm.here2si.ru/web6/assets/fonts/GDSherpa-bold.woff2
104.21.92.215200 OK28 kB
GET wryglgcufm.here2si.ru/web6/assets/fonts/GDSherpa-bold.woff
104.21.92.215200 OK36 kB
GET wryglgcufm.here2si.ru/web6/assets/fonts/GDSherpa-regular.woff2
104.21.92.215200 OK29 kB
GET wryglgcufm.here2si.ru/web6/assets/fonts/GDSherpa-regular.woff
104.21.92.215200 OK37 kB
GET wryglgcufm.here2si.ru/web6/assets/fonts/GDSherpa-vf.woff2
104.21.92.215200 OK44 kB
GET wryglgcufm.here2si.ru/web6/assets/fonts/GDSherpa-vf2.woff2
104.21.92.215200 OK93 kB
GET wryglgcufm.here2si.ru/web6/assets/css/pages-okta.css?cb=1700506222252
104.21.92.215200 OK0 B
GET wryglgcufm.here2si.ru/web6/assets/back.png
104.21.92.215200 OK231 B
GET wryglgcufm.here2si.ru/web6/assets/key.png
104.21.92.215200 OK727 B
GET wryglgcufm.here2si.ru/web6/assets/godaddy-logo.png
104.21.92.215200 OK50 kB
GET wryglgcufm.here2si.ru/web6/assets/godaddy-microsoftlogo.png
104.21.92.215200 OK71 kB
GET wryglgcufm.here2si.ru/web6/assets/js/pages-head-top-web.min.js?cb=1700506221725
104.21.92.215200 OK44 kB
GET aadcdn.msftauth.net/shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg
152.199.23.37200 OK190 B
GET aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg
152.199.23.37200 OK2.4 kB
wryglgcufm.here2si.ru/342nb/
104.21.92.215 7.3 kB
GET wryglgcufm.here2si.ru/testweb/assets/365background.png
104.21.92.215200 OK326 kB
GET wryglgcufm.here2si.ru/web6/assets/365logo.png
104.21.92.215200 OK29 kB
GET logincdn.msauth.net/shared/1.0/content/images/picker_verify_email_958962caa7cf6b75cd412e9e3b687b22.svg
192.229.221.185200 OK212 B
GET challenges.cloudflare.com/turnstile/v0/api.js?render=explicit
104.17.3.184302 Found6.4 kB
wryglgcufm.here2si.ru//web6socket/socket.io/?type=User&EIO=4&transport=websocket
104.21.92.215 0 B
GET httpbin.org/ip
34.225.53.60200 OK31 B
GET wryglgcufm.here2si.ru/web6/assets/js/pages.min.js?cb=1700506222252
104.21.92.215200 OK20 kB
GET aadcdn.msftauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg
152.199.23.37200 OK628 B
GET wryglgcufm.here2si.ru/342nb/
104.21.92.215200 OK111 B
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/rfsfl/0x4AAAAAAANKsAm4XSMxhr00/auto/normal
104.17.3.184200 OK73 kB
POST wryglgcufm.here2si.ru/web6/info
104.21.92.215200 OK36 kB
GET aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg
152.199.23.37200 OK2.9 kB
GET wryglgcufm.here2si.ru//web6socket/socket.io/?type=User&EIO=4&transport=websocket
104.21.92.215101 Switching Protocols0 B
POST wryglgcufm.here2si.ru/web6/info
104.21.92.215200 OK20 B
GET challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?render=explicit
104.17.3.184200 OK34 kB
POST wryglgcufm.here2si.ru/web6/validatecaptcha
104.21.92.215200 OK20 B
GET wryglgcufm.here2si.ru/web6/assets/microsoftfavicon.ico
104.21.92.215200 OK17 kB
GET wryglgcufm.here2si.ru/web6/assets/cloudfavicon.ico
104.21.92.215200 OK34 kB
POST wryglgcufm.here2si.ru/web6/info
104.21.92.215200 OK66 B
GET wryglgcufm.here2si.ru/web6/assets/js/pages-head-web.min.js?cb=1700506222252
104.21.92.215200 OK14 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/rfsfl/0x4AAAAAAANKsAm4XSMxhr00/auto/normal
0.0.0.0 0 B
GET wryglgcufm.here2si.ru/web6/assets/pages/69q55.css?cb=1700506222252
104.21.92.215200 OK1.1 kB
POST wryglgcufm.here2si.ru/web6/info
104.21.92.215200 OK1 B
GET wryglgcufm.here2si.ru/web6/assets/css/pages.min.css?cb=1700506222252
104.21.92.215200 OK17 kB
GET aadcdn.msftauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg
152.199.23.37200 OK379 B
GET wryglgcufm.here2si.ru/web6/assets/godaddy-left.png
104.21.92.215200 OK30 kB
GET adfs.heart.org/adfs/portal/logo/logo.png
69.152.183.140200 OK6.4 kB
GET cdn.socket.io/4.6.0/socket.io.min.js
143.204.55.115200 OK46 kB
GET wryglgcufm.here2si.ru/web6/assets/css/pages-godaddy.css?cb=1700506222252
104.21.92.215200 OK38 kB
GET wryglgcufm.here2si.ru/web6/assets/cloudfavicon.ico
104.21.92.215200 OK34 kB
GET code.jquery.com/jquery-3.6.0.min.js
151.101.130.137200 OK90 kB