Report Overview

  1. Visited public
    2023-11-21 07:24:34
  2. URL

    mycityadvertising.com/email/verification/r7onvl/bWljaGFlbC5zbWFseWdhQHVicy5jb20=

  3. Finishing URL

    kiedlng.com/redirect.cgi?ref=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

  4. IP / ASN
    69.49.245.172

    #46606 UNIFIEDLAYER-AS-1

    Title
    j26kyoxgkx
  5. Phishing - Microsoft Outlook

Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r4.res.office365.com1802005-06-202017-03-03 13:49:032023-11-21 05:24:32
aadcdn.msftauthimages.net46222018-11-122019-08-14 20:22:232023-11-20 05:28:09
4bfd4ade.23555334c639c3cc5f42b21b.workers.devunknownunknownNo dataNo data
mycityadvertising.comunknown2006-08-302016-11-21 11:56:232023-11-20 17:23:28
challenges.cloudflare.comunknown2009-02-172021-10-20 07:02:032023-11-21 05:09:18
kiedlng.comunknownunknown2023-11-20 13:28:102023-11-21 06:22:02
outlook.office365.com512005-06-202013-04-11 01:09:242021-03-15 09:11:50

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (142)

HTTP Transactions (37)

URLIPResponseSize
mycityadvertising.com/email/verification/r7onvl/bWljaGFlbC5zbWFseWdhQHVicy5jb20=
69.49.245.172 0 B
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=82973123889f712a
104.17.3.184200 OK124 kB
GET kiedlng.com/?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2tpZWRsbmcuY29tIiwiZG9tYWluIjoia2llZGxuZy5jb20iLCJrZXkiOiJxMWxHSG1mU2RHOWIiLCJxcmMiOiJtaWNoYWVsLnNtYWx5Z2FAdWJzLmNvbSIsImlhdCI6MTcwMDU1MTQ1OCwiZXhwIjoxNzAwNTUxNTc4fQ.Oq8DPbFQ-3DyNlpTqw5m4-atqcg8R78-EiT_IFcIvYg
193.109.120.226302 Found0 B
GET kiedlng.com/?qrc=michael.smalyga%40ubs.com
193.109.120.226302 Moved Temporarily0 B
GET kiedlng.com/owa/?login_hint=michael.smalyga%40ubs.com
193.109.120.226302 Found1.4 kB
GET kiedlng.com/aadcdn.msftauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0gg2.css
193.109.120.226200 OK20 kB
GET kiedlng.com/aadcdn.msftauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_o-ZZReABRa0UshwWo2BEBw2.js
193.109.120.226200 OK689 kB
GET kiedlng.com/aadcdn.msftauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
193.109.120.226200 OK17 kB
GET outlook.office365.com/owa/prefetch.aspx
52.98.149.178200 OK1.2 kB
GET kiedlng.com/aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif
193.109.120.226200 OK3.6 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/82973123889f712a/1700551455723/ba53188d27106ee1d0ed27e724d5c602c75b7e05dc19896fca403d454806eece/IvoX71BpZxyRJi1
104.17.3.184401 Unauthorized5.4 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/b0x8z/0x4AAAAAAANZ6huOM07-rc92/auto/normal
104.17.3.184200 OK197 kB
GET r4.res.office365.com/owa/prem/15.20.7002.30/scripts/boot.worldwide.1.mouse.js
95.101.10.210200 OK163 kB
GET aadcdn.msftauthimages.net/c1c6b6c8-3ryhipbfkhxxwptmyqh8tcus4iat4acfnhdjhttbkbi/logintenantbranding/0/bannerlogo?ts=637058688700493492
13.107.213.53200 OK3.0 kB
GET aadcdn.msftauthimages.net/c1c6b6c8-3ryhipbfkhxxwptmyqh8tcus4iat4acfnhdjhttbkbi/logintenantbranding/0/illustration?ts=637058688689463941
13.107.213.53200 OK181 kB
GET r4.res.office365.com/owa/prem/15.20.7002.30/scripts/boot.worldwide.2.mouse.js
95.101.10.210200 OK170 kB
GET r4.res.office365.com/owa/prem/15.20.7002.30/scripts/boot.worldwide.3.mouse.js
95.101.10.210200 OK146 kB
GET r4.res.office365.com/owa/prem/15.20.7002.30/resources/images/0/sprite1.mouse.png
95.101.10.210200 OK132 B
GET r4.res.office365.com/owa/prem/15.20.7002.30/resources/images/0/sprite1.mouse.css
95.101.10.210200 OK288 B
GET r4.res.office365.com/owa/prem/15.20.7002.30/resources/styles/0/boot.worldwide.mouse.css
95.101.10.210200 OK44 kB
GET r4.res.office365.com/owa/prem/15.20.7002.30/resources/styles/fonts/office365icons.woff
95.101.10.210200 OK78 kB
GET r4.res.office365.com/owa/prem/15.20.7002.30/resources/styles/fonts/office365icons.woff
95.101.10.210200 OK78 kB
POST 4bfd4ade.23555334c639c3cc5f42b21b.workers.dev/?qrc=michael.smalyga@ubs.com
104.21.71.36302 Found43 kB
GET kiedlng.com/redirect.cgi?ref=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
193.109.120.226200 OK43 kB
GET kiedlng.com/aadcdn.msftauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pconfirmsend_964df482332b296c7a9c.js
193.109.120.226200 OK11 kB
GET kiedlng.com/aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif
193.109.120.226200 OK2.7 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/82973123889f712a/1700551455718/sHPrTZ8TLczXXoC
104.17.3.184200 OK61 B
GET kiedlng.com/aadcdn.msftauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_orpt-59zawtpatdv5lgnaa2.js
193.109.120.226200 OK53 kB
GET r4.res.office365.com/owa/prem/15.20.7002.30/scripts/boot.worldwide.0.mouse.js
95.101.10.210200 OK664 kB
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/972962:1700548180:z8PTLHAh69-5nnpIiMyttMT29Dxa9rokymvcUpvW-FI/82973123889f712a/5b4c4f9b6ab8787
104.17.3.184200 OK3.6 kB
GET 4bfd4ade.23555334c639c3cc5f42b21b.workers.dev/?qrc=michael.smalyga@ubs.com
104.21.71.36200 OK3.3 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2%2BU%3D
104.17.3.184200 OK61 B
GET challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.17.3.184302 Found34 kB
GET 4bfd4ade.23555334c639c3cc5f42b21b.workers.dev/favicon.ico
104.21.71.36200 OK3.3 kB
GET challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?onload=onloadTurnstileCallback
104.17.3.184200 OK34 kB
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/972962:1700548180:z8PTLHAh69-5nnpIiMyttMT29Dxa9rokymvcUpvW-FI/82973123889f712a/5b4c4f9b6ab8787
104.17.3.184200 OK86 kB
GET kiedlng.com/aadcdn.msftauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js
193.109.120.226200 OK110 kB