Report Overview

  1. Visited public
    2023-11-04 01:38:37
  2. URL

    nathanreed.com/new/auth/a2V2aW5AYndzaHZhYy5jb20=

  3. Finishing URL

    pub-bd6e7119846f4870a6bc1fb33bcc6c57.r2.dev/baworking.html#

  4. IP / ASN
    192.185.190.124

    #46606 UNIFIEDLAYER-AS-1

    Title
    Sign in to Outlook
  5. Phishing - Microsoft Outlook

Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
nathanreed.comunknown2002-01-192015-07-28 17:47:502023-10-04 17:04:37
pub-bd6e7119846f4870a6bc1fb33bcc6c57.r2.devunknown2022-08-232023-11-03 02:39:232023-11-03 18:40:50
nic-riyadh.comunknown2018-04-302019-07-03 20:39:072023-11-03 09:47:24
cdnjs.cloudflare.com2352009-02-172015-04-17 22:46:332023-11-03 05:09:03
code.jquery.com6342005-12-102012-05-21 19:28:022023-11-03 08:47:44
aadcdn.msauth.net14212018-10-252018-11-19 11:50:032023-11-03 05:26:33

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish
SeverityIndicatorAlert
mediumpub-bd6e7119846f4870a6bc1fb33bcc6c57.r2.dev/baworking.htmlOffice365
mediumpub-bd6e7119846f4870a6bc1fb33bcc6c57.r2.dev/baworking.htmlOffice365

PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (6)

HTTP Transactions (13)

URLIPResponseSize
nathanreed.com/new/auth/a2V2aW5AYndzaHZhYy5jb20=
192.185.190.124 148 B
pub-bd6e7119846f4870a6bc1fb33bcc6c57.r2.dev/baworking.html
104.18.2.35 226 B
GET nic-riyadh.com/installer/host2.3/admin/js/sc.php
192.185.35.252200 OK926 B
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
104.17.24.14200 OK14 kB
GET code.jquery.com/jquery-3.1.1.min.js
151.101.130.137200 OK30 kB
GET pub-bd6e7119846f4870a6bc1fb33bcc6c57.r2.dev/favicon.ico
104.18.2.35404 Not Found6.5 kB
GET cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css
104.17.24.14200 OK5.9 kB
GET code.jquery.com/jquery-3.1.1.min.js
151.101.130.137200 OK30 kB
GET aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_b59c16ca9bf156438a8a96d45e33db64.svg
13.107.246.53200 OK2.4 kB
GET aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_27a6d18b56f46818420e60a773c36d4e.svg
13.107.246.53200 OK199 B
POST nic-riyadh.com/installer/host2.3/60b7873.php
192.185.35.252200 OK429 kB
GET aadcdn.msauth.net/shared/1.0/content/images/picker_verify_call_fe87496cc7a44412f7893a72099c120a.svg
13.107.246.53200 OK2.9 kB
GET pub-bd6e7119846f4870a6bc1fb33bcc6c57.r2.dev/baworking.html
104.18.2.35200 OK239 B