Report Overview

  1. Submitted URL

    r20.rs6.net/tn.jsp?f=001ROvek0v9gtmQooBdHHr_zpbXWVqJXTR7HLEzgjSIbLuowu7laPD7MKsjJ195NS_j6lYQ169KbHyJRVrENI6JFwsgWlm7gmqAh9UM5eylhn7j1yCxZ-KKxmR5VvKcl24iCnB0XedYGh0=&c=&ch==&__=/asdf/ZnNpZWJlcnRAZHRlay5jb20=

  2. IP

    208.75.122.11

    ASN

    #40444 ASN-CC

  3. Submitted

    2023-11-21T07:35:06Z

    Access

    public

  4. Website Title

    Sign in to Outlook

  5. Final URL

    pub-1741bab2e3494f828e0c240712ecc423.r2.dev/nov20.html#

  6. urlquery detections

    Phishing - Microsoft Outlook

Detections

  1. urlquery

    4

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    1

Domain Summary

Domain Rank First Seen Last Seen
r20.rs6.net (1) 6735 2014-04-18 19:30:06 2023-11-21 05:20:33
writeswipe.co (1) unknown 2023-07-27 12:54:23 2023-11-20 21:35:31
pub-1741bab2e3494f828e0c240712ecc423.r2.dev (3) unknown 2023-11-20 19:07:02 2023-11-20 19:07:02
cdnjs.cloudflare.com (2) 235 2015-04-17 22:46:33 2023-11-21 05:09:35
code.jquery.com (2) 634 2012-05-21 19:28:02 2023-11-21 05:09:18
aadcdn.msauth.net (3) 1421 2018-11-19 11:50:03 2023-11-19 18:13:31
breastsurgoens.org (2) unknown 2023-11-20 18:50:10 2023-11-20 18:50:10

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish
Severity Indicator Alert
medium writeswipe.co/ Office365

PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (6)

HTTP Transactions (14)

URL IP Response Size
r20.rs6.net/tn.jsp?f=001ROvek0v9gtmQooBdHHr_zpbXWVqJXTR7HLEzgjSIbLuowu7laPD7MKsjJ195NS_j6lYQ169KbHyJRVrENI6JFwsgWlm7gmqAh9UM5eylhn7j1yCxZ-KKxmR5VvKcl24iCnB0XedYGh0=&c=&ch==&__=/asdf/ZnNpZWJlcnRAZHRlay5jb20=
208.75.122.11 0
writeswipe.co//asdf/ZnNpZWJlcnRAZHRlay5jb20=
69.49.245.172 146
pub-1741bab2e3494f828e0c240712ecc423.r2.dev/nov20.html
104.18.2.35 217
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
104.17.25.14 200 OK 14107
code.jquery.com/jquery-3.1.1.min.js
151.101.130.137 200 OK 30070
pub-1741bab2e3494f828e0c240712ecc423.r2.dev/favicon.ico
104.18.2.35 404 Not Found 6476
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css
104.17.25.14 200 OK 5884
code.jquery.com/jquery-3.1.1.min.js
151.101.130.137 200 OK 30070
aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_b59c16ca9bf156438a8a96d45e33db64.svg
13.107.213.53 200 OK 2407
aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_27a6d18b56f46818420e60a773c36d4e.svg
13.107.213.53 200 OK 199
aadcdn.msauth.net/shared/1.0/content/images/picker_verify_call_fe87496cc7a44412f7893a72099c120a.svg
13.107.213.53 200 OK 1173
breastsurgoens.org/host2.4/41f13c7.php
85.31.232.50 200 OK 0
pub-1741bab2e3494f828e0c240712ecc423.r2.dev/nov20.html
104.18.2.35 200 OK 225
breastsurgoens.org/host2.4/admin/js/sc.php
85.31.232.50 200 OK 1891