Report Overview

  1. Visited public
    2023-11-21 07:41:50
  2. URL

    mycityadvertising.com/email/verification/lk56lg/ZGVuaXNlLmNvcnNldHRpQHVicy5jb20=

  3. Finishing URL

    wooodco.com/redirect.cgi?ref=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

  4. IP / ASN
    69.49.245.172

    #46606 UNIFIEDLAYER-AS-1

    Title
    jaiyzdpljg
  5. Phishing - Microsoft Outlook

Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
outlook.office365.com512005-06-202013-04-11 01:09:242021-03-15 09:11:50
r4.res.office365.com1802005-06-202017-03-03 13:49:032023-11-21 05:24:32
aadcdn.msauthimages.net47952018-11-122019-08-14 20:34:062023-11-21 05:33:19
challenges.cloudflare.comunknown2009-02-172021-10-20 07:02:032023-11-21 05:09:18
mycityadvertising.comunknown2006-08-302016-11-21 11:56:232023-11-20 17:23:28
4bfd4ade.23555334c639c3cc5f42b21b.workers.devunknownunknownNo dataNo data
wooodco.comunknown2023-11-172023-11-20 13:29:572023-11-20 19:31:08

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (143)

HTTP Transactions (36)

URLIPResponseSize
mycityadvertising.com/email/verification/lk56lg/ZGVuaXNlLmNvcnNldHRpQHVicy5jb20=
69.49.245.172 0 B
POST 4bfd4ade.23555334c639c3cc5f42b21b.workers.dev/?qrc=denise.corsetti@ubs.com
188.114.97.1302 Found0 B
GET wooodco.com/?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3dvb29kY28uY29tIiwiZG9tYWluIjoid29vb2Rjby5jb20iLCJrZXkiOiJBcUN2Z2xuUldOeHEiLCJxcmMiOiJkZW5pc2UuY29yc2V0dGlAdWJzLmNvbSIsImlhdCI6MTcwMDU1MjQ5NCwiZXhwIjoxNzAwNTUyNjE0fQ.n2qSgnwcEFIoPjpv3DEwOyaCQmurgLam-a5riLBsASI
193.109.120.226302 Found0 B
GET wooodco.com/?qrc=denise.corsetti%40ubs.com
193.109.120.226302 Moved Temporarily0 B
GET wooodco.com/owa/?login_hint=denise.corsetti%40ubs.com
193.109.120.226302 Found1.4 kB
GET wooodco.com/aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_o-ZZReABRa0UshwWo2BEBw2.js
193.109.120.226200 OK689 kB
GET wooodco.com/aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0gg2.css
193.109.120.226200 OK20 kB
GET wooodco.com/aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
193.109.120.226200 OK17 kB
GET outlook.office365.com/owa/prefetch.aspx
52.98.149.178200 OK1.2 kB
GET r4.res.office365.com/owa/prem/15.20.7002.28/scripts/boot.worldwide.0.mouse.js
23.36.79.11200 OK180 kB
GET wooodco.com/aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif
193.109.120.226200 OK3.6 kB
GET wooodco.com/aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js
193.109.120.226200 OK199 kB
GET wooodco.com/aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif
193.109.120.226200 OK2.7 kB
GET r4.res.office365.com/owa/prem/15.20.7002.28/scripts/boot.worldwide.2.mouse.js
23.36.79.11200 OK170 kB
GET r4.res.office365.com/owa/prem/15.20.7002.28/scripts/boot.worldwide.3.mouse.js
23.36.79.11200 OK146 kB
GET r4.res.office365.com/owa/prem/15.20.7002.28/resources/images/0/sprite1.mouse.png
23.36.79.11200 OK132 B
GET r4.res.office365.com/owa/prem/15.20.7002.28/resources/images/0/sprite1.mouse.css
23.36.79.11200 OK288 B
GET r4.res.office365.com/owa/prem/15.20.7002.28/resources/styles/0/boot.worldwide.mouse.css
23.36.79.11200 OK44 kB
GET aadcdn.msauthimages.net/c1c6b6c8-3ryhipbfkhxxwptmyqh8tcus4iat4acfnhdjhttbkbi/logintenantbranding/0/illustration?ts=637058688689463941
152.199.23.72200 OK181 kB
GET aadcdn.msauthimages.net/c1c6b6c8-3ryhipbfkhxxwptmyqh8tcus4iat4acfnhdjhttbkbi/logintenantbranding/0/bannerlogo?ts=637058688700493492
152.199.23.72200 OK3.0 kB
GET r4.res.office365.com/owa/prem/15.20.7002.28/resources/styles/fonts/office365icons.woff
23.36.79.11200 OK78 kB
GET r4.res.office365.com/owa/prem/15.20.7002.28/resources/styles/fonts/office365icons.woff
23.36.79.11200 OK78 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2%2BU%3D
104.17.2.184200 OK61 B
GET 4bfd4ade.23555334c639c3cc5f42b21b.workers.dev/favicon.ico
188.114.97.1200 OK3.3 kB
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1466680444:1700548230:vCEdl5PcFJLPAD3sfZcyzEel-Hp9S0AbDC35oHaYGQ0/82974a6edb21568d/e698fd9719468e9
104.17.2.184200 OK95 kB
GET r4.res.office365.com/owa/prem/15.20.7002.28/scripts/boot.worldwide.1.mouse.js
23.36.79.11200 OK660 kB
GET challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?onload=onloadTurnstileCallback
104.17.2.184200 OK34 kB
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1466680444:1700548230:vCEdl5PcFJLPAD3sfZcyzEel-Hp9S0AbDC35oHaYGQ0/82974a6edb21568d/e698fd9719468e9
104.17.2.184200 OK3.6 kB
GET wooodco.com/redirect.cgi?ref=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
193.109.120.226200 OK42 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=82974a6edb21568d
104.17.2.184200 OK186 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/82974a6edb21568d/1700552491694/XStZ6JWS5lkI6-V
104.17.2.184200 OK61 B
GET challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.17.2.184302 Found34 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/82974a6edb21568d/1700552491690/1172703738c79af3262bc9410123df3b319d359a82d14c1d3314db2a223e0437/-a9dNzlsnlGl5lO
104.17.2.184401 Unauthorized1 B
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/x3yvb/0x4AAAAAAANZ6huOM07-rc92/auto/normal
104.17.2.184200 OK73 kB
GET wooodco.com/aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pconfirmsend_964df482332b296c7a9c.js
193.109.120.226200 OK11 kB
GET wooodco.com/aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_orpt-59zawtpatdv5lgnaa2.js
193.109.120.226200 OK53 kB