Report Overview
Visitedpublic
2025-06-07 09:13:57
URL
oatac.uakmub.es/SUhEZZRyui3n@5/*andrew.maclaren@slurpmail.net
Finishing URL
oatac.uakmub.es/bgaibbefbmqfpmwvxemmtYA2YYAJ1BN7NPW9GDMXV0?QVUVISKUYFIGKDRGHAKKISGJWNSA
IP / ASN
104.21.16.1
#13335 CLOUDFLARENET
Title
Secure System Login

Phishing - Microsoft

Phishing - Generic phishing

Suspicious - Anti-debugging code

Phishing - Tycoon Phishing Kit

Detections

urlquery
66
Network Intrusion Detection
1
Threat Detection Systems
2

Host Summary

HostRankRegisteredFirst SeenLast Seen
oatac.uakmub.es
unknownunknown2025-06-072025-06-07
ok4static.oktacdn.com
165922014-11-112018-06-152025-06-04
code.jquery.com
6342005-12-102012-05-212025-06-04
cdnjs.cloudflare.com
2352009-02-172012-05-232025-06-04
cusiy53sltjeyvbwgomxhqojoojntzyat8b6mq1sdizf553iuj.yxomu.es
unknownunknown2025-06-072025-06-07
hga48e.xubyc.es
unknownunknown2025-06-072025-06-07
objects.githubusercontent.com
1340602014-02-062021-11-012025-06-04
get.geojs.io
174182017-02-182017-03-302025-06-05
github.com
14232007-10-092016-07-132025-06-04
developers.cloudflare.com
5920342009-02-172012-09-072025-06-01

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IP
172.67.70.233
ET INFO External IP Address Lookup Domain (get .geojs .io) in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumyxomu.esSinkholed

ThreatFox

No alerts detected


JavaScript (98)

HTTP Transactions (45)

URLIPResponseSize
POST oatac.uakmub.es/xyYlbj6UdVczDPBKljlvLnvit6tk4W45aeGAGCRupfq
104.21.80.1200 OK286 B
GET oatac.uakmub.es/GDSherpa-vf2.woff2
104.21.80.1200 OK93 kB
GET oatac.uakmub.es/opfjLBaElFwqbW05bRiQLnNdvCYbBhkHijw4XGUKve721Wk7egsuR2cd200
104.21.80.1200 OK268 B
GET oatac.uakmub.es/op3PMiBERSVEGSEYGkbmnyKCZgVFSsWiYG45140
104.21.80.1200 OK892 B
GET ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
3.167.2.112200 OK10 kB
GET oatac.uakmub.es/uvWonXeU4f4xBTeswTCHJqvs7BE6BOD7hcc6jD45Ym2QHLV7MqXD1CKYWzPYrJbtxsjQjVOogh260
104.21.80.1200 OK18 kB
GET oatac.uakmub.es/favicon.ico
104.21.80.1404 Not Found0 B
GET code.jquery.com/jquery-3.6.0.min.js
151.101.130.137200 OK90 kB
GET oatac.uakmub.es/56ik7durA5abZ7MCdj6717
104.21.80.1200 OK28 kB
GET oatac.uakmub.es/ij5wR2eUvAOR5bjLeDSQJgLYCxlzpU8uLkxyXeWQikgQpcUf1NOhD12203
104.21.80.1200 OK25 kB
GET objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250607%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250607T091344Z&X-Amz-Expires=300&X-Amz-Signature=589940afb64f9a1080926df3790fe72e1c7fa5222ebab2c5bf90a78a774b8dd6&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
185.199.111.133200 OK10 kB
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
GET oatac.uakmub.es/mnxC6ZIaMKQfFShSCF73vKelFkGH5YYArNyTL4jzdR4OBbijhbWYoLuhs3ajgF6LS7cIYAOx9Td93r3wx220
104.21.80.1200 OK1.9 kB
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
GET code.jquery.com/jquery-3.6.0.min.js
151.101.130.137200 OK90 kB
GET oatac.uakmub.es/GDSherpa-regular.woff2
104.21.80.1200 OK29 kB
GET ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7
3.167.2.112200 OK11 kB
GET oatac.uakmub.es/qrG4yW3R7FY813hQeumBEAUZfYJiiCY97PHkctog4SNst5uLQwWCLo7NU2RR6x8ctuPe6PvdK75YXicd240
104.21.80.1200 OK9.6 kB
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
POST oatac.uakmub.es/tzpmdoxujJOSCVqkrgon5t
104.21.80.1200 OK20 B
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
GET oatac.uakmub.es/GDSherpa-bold.woff2
104.21.80.1200 OK28 kB
GET oatac.uakmub.es/GDSherpa-bold.woff
104.21.80.1200 OK36 kB
GET oatac.uakmub.es/wxOBAXKkM7zxA0PBXtuGop6IpHSSzXjjkyJ34124
104.21.80.1200 OK644 B
GET ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
3.167.2.112200 OK223 kB
GET code.jquery.com/jquery-3.6.0.min.js
151.101.130.137200 OK90 kB
GET get.geojs.io/v1/ip/geo.json
172.67.70.233200 OK337 B
GET oatac.uakmub.es/xy2JcuQbrsvJHgh23
104.21.80.1200 OK36 kB
GET oatac.uakmub.es/yzg6WCxpZxcMTRRAGxCZobnxGpYmnOgpUGs4YUV506TZYtAsreI90173
104.21.80.1200 OK2.9 kB
GET oatac.uakmub.es/ijzDFEAXJ80LwIrTV84l4bhLgY7wU8URQIqY89HIIdmFWQFthgiVAMA3NKT6gnWkwplMVGiTIDyz229
104.21.80.1200 OK1.3 kB
GET oatac.uakmub.es/SUhEZZRyui3n@5/*andrew.maclaren@slurpmail.net
104.21.80.1200 OK25 kB
GET github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js
140.82.121.4302 Found10 kB
GET oatac.uakmub.es/GDSherpa-vf.woff2
104.21.80.1200 OK44 kB
GET oatac.uakmub.es/mnCq6shVQaCgXQ0nU0bGu2SlRXWKmcPpHklCOxTXdcOha81RbHSpWQ90143
104.21.80.1200 OK270 B
GET oatac.uakmub.es/favicon.ico
104.21.80.1404 Not Found0 B
GET oatac.uakmub.es/GDSherpa-regular.woff
104.21.80.1200 OK37 kB
POST cusiy53sltjeyvbwgomxhqojoojntzyat8b6mq1sdizf553iuj.yxomu.es/xjioviohctzwkpvvppprmvhXJnnPtqpatPLAJRCDKAKIOVVUHKTSAEPUVWRLMNZIQWGYUFHWJXHXUQUBDLPpq0yuxXt34SDXwZuv35
104.21.9.148200 OK536 B
GET developers.cloudflare.com/favicon.png
104.16.5.189200 OK937 B
GET oatac.uakmub.es/SUhEZZRyui3n@5/*andrew.maclaren@slurpmail.net
104.21.80.1200 OK15 kB
GET oatac.uakmub.es/bgaibbefbmqfpmwvxemmtYA2YYAJ1BN7NPW9GDMXV0?QVUVISKUYFIGKDRGHAKKISGJWNSA
104.21.80.1200 OK212 kB
GET oatac.uakmub.es/kl3g2nB099oK7ApZIkTD8lPYthcdai7CTbMKCLtYRewpKE78170
104.21.80.1200 OK7.4 kB
GET oatac.uakmub.es/34BdO1lASi22tw5BijLdzDxjuqp67110
104.21.80.1200 OK293 kB
GET ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2
3.167.2.112200 OK20 kB
GET hga48e.xubyc.es/mori$5ug47e
104.21.112.1200 OK1 B