Report Overview

  1. Visited public
    2024-02-15 15:56:35
  2. URL

    go.onelink.me/107872968?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__AndroidUsers&af_wl=ym&af_sub1=Internal&af_sub2=Global_YGrowth&af_sub3=EmailSignature&af_web_dp=//714443diYOVX2T477564.bonma.ch/.1ow./373429qYu6GXTp345847/Y2NlbmRlamFzQHNvYm9iYS5jb20=//714443diYOVX2T477564.bonma.ch/.1ow./373429qYu6GXTp345847/Y2NlbmRlamFzQHNvYm9iYS5jb20=?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__AndroidUsers&af_wl=ym&af_sub1=Internal&af_sub2=Global_YGrowth&af_sub3=EmailSignature

  3. Finishing URL

    login.bonma.ch/.owa./#ccendejas@soboba.com

  4. IP / ASN
    143.204.55.84

    #16509 AMAZON-02

    Title
    Outlook Web App
  5. Phishing - Microsoft

    Suspicious - Suspicious Javascript code

    Suspicious - Anti-debugging code

Detections
urlquery
8
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
login.bonma.chunknownunknown2024-02-15 04:16:432024-02-15 13:05:19
go.onelink.me294452014-11-262014-12-11 06:24:552024-02-15 10:27:20
ajax.googleapis.com129052005-01-252013-08-16 11:51:312024-02-15 12:55:40
webmail.addaxpetroleum.comunknown2004-02-112022-05-05 12:30:162024-02-15 11:10:16
api.ipify.org32672014-01-052014-10-06 14:38:432024-02-15 08:35:06

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (4)

HTTP Transactions (7)

URLIPResponseSize
go.onelink.me/107872968?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__AndroidUsers&af_wl=ym&af_sub1=Internal&af_sub2=Global_YGrowth&af_sub3=EmailSignature&af_web_dp=//714443diYOVX2T477564.bonma.ch/.1ow./373429qYu6GXTp345847/Y2NlbmRlamFzQHNvYm9iYS5jb20=//714443diYOVX2T477564.bonma.ch/.1ow./373429qYu6GXTp345847/Y2NlbmRlamFzQHNvYm9iYS5jb20=?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__AndroidUsers&af_wl=ym&af_sub1=Internal&af_sub2=Global_YGrowth&af_sub3=EmailSignature
143.204.55.129 0 B
ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
216.58.207.234200 OK31 kB
webmail.addaxpetroleum.com/owa/auth/15.0.1497/themes/resources/segoeui-semilight.ttf
52.136.245.70200 OK26 kB
webmail.addaxpetroleum.com/owa/auth/15.0.1497/themes/resources/favicon.ico
52.136.245.70200 OK7.9 kB
api.ipify.org/?format=json
104.26.12.205200 OK21 B
webmail.addaxpetroleum.com/owa/auth/15.0.1497/themes/resources/segoeui-regular.ttf
52.136.245.70200 OK26 kB
login.bonma.ch/.owa./
104.21.70.189200 OK27 kB