Report Overview

  1. Submitted URL

    webmail.bravowell.com

  2. IP

    45.40.140.6

    ASN

    #26496 AS-26496-GO-DADDY-COM-LLC

  3. Submitted

    2024-03-28 17:59:35

    Access

    public

  4. Website Title

    Sign In

  5. Final URL

    sso.secureserver.net/login?app=o365&realm=pass

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
img6.wsimg.com154382008-03-172020-02-202024-03-27
gui.secureserver.net2535221998-03-302014-08-062024-03-27
unpkg.com116932016-01-062016-01-082024-03-27
events.api.secureserver.net1251791998-03-302020-06-232024-03-28
ocsp.starfieldtech.com66162003-03-062012-06-222024-03-28
webmail.bravowell.comunknownunknownNo dataNo data
email.secureserver.net156225unknown2015-01-032023-04-27
unknown
www.googletagmanager.com752011-11-112013-05-222024-03-28
sso.secureserver.net1855551998-03-302014-08-062024-02-05
img1.wsimg.com98932008-03-172012-06-202024-03-28
csp.secureserver.netunknown1998-03-302022-12-182024-03-28

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (36)

HTTP Transactions (50)

URLIPResponseSize
ocsp.starfieldtech.com/
192.124.249.36 2.1 kB
webmail.bravowell.com/
45.40.130.41301 Moved Permanently277 B
ocsp.starfieldtech.com/
192.124.249.36 2.1 kB
email.secureserver.net/login.php?domain=webmail.bravowell.com
45.40.140.6302 Found0 B
sso.secureserver.net/login?app=o365&realm=pass
104.110.14.92200 OK43 kB
img6.wsimg.com/auth-assets/4aa15230f448b21526337e8f365c65c3bb92f8af/login-panel.js
23.36.79.43200 OK112 kB
img6.wsimg.com/wrhs-next/153703821fb742c996bbe1f79a09190a/utility-header.css
23.36.79.43200 OK12 kB
img6.wsimg.com/wrhs/65e723d1323a15a62b64824a8d885bac/uxcore2.min.css
23.36.79.43200 OK19 kB
img6.wsimg.com/identity-static-assets/_next/static/chunks/pages/_app-34f9f05a5a21e57c.js
23.36.79.43200 OK86 kB
img6.wsimg.com/identity-static-assets/_next/static/chunks/12-cf29d8fb90cc6d47.js
23.36.79.43200 OK4.6 kB
img6.wsimg.com/identity-static-assets/_next/static/chunks/6502-97f98446d14ad925.js
23.36.79.43200 OK4.1 kB
img6.wsimg.com/identity-static-assets/_next/static/chunks/pages/login-23644d90ae947877.js
23.36.79.43200 OK1.5 kB
img6.wsimg.com/hivemind/hivemind-3.0.1.js
23.36.79.43200 OK23 kB
img6.wsimg.com/wrhs-next/1f4ff97c2ffa19e3e900f5149b1c5a38/utility-header.js
23.36.79.43200 OK60 kB
sso.secureserver.net/149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/p.js
104.110.14.92200 OK76 kB
img6.wsimg.com/identity-static-assets/_next/static/Fe7S4_9w1ICSJyYY88RRc/_buildManifest.js
23.36.79.43200 OK2.6 kB
img6.wsimg.com/wrhs-next/8edf0a2f0ff42501d03edff505fe3faf/scc-gpl-c1.min.js
23.36.79.43200 OK30 kB
img6.wsimg.com/identity-static-assets/_next/static/Fe7S4_9w1ICSJyYY88RRc/_ssgManifest.js
23.36.79.43200 OK64 B
img6.wsimg.com/identity-static-assets/_next/static/css/95c2f81e5812e203.css
23.36.79.43200 OK418 B
img6.wsimg.com/wrhs-next/5a3c09ada3e8754d1f83b97656867399/heartbeat.js
23.36.79.43200 OK1.1 kB
img6.wsimg.com/identity-static-assets/_next/static/chunks/main-be9a3ce76a67f23c.js
23.36.79.43200 OK29 kB
img6.wsimg.com/wrhs/5dca119939463a11b5bba26a8dc03d3c/vendor.min.js
23.36.79.43200 OK78 kB
img6.wsimg.com/identity-static-assets/_next/static/chunks/framework-a0c46ad6a3b8da13.js
23.36.79.43200 OK392 B
img6.wsimg.com/identity-static-assets/_next/static/chunks/webpack-a09ae2d0ab95e682.js
23.36.79.43200 OK4.5 kB
img6.wsimg.com/wrhs/31aa663a306bb8fc0cb65e5d696fb1bf/uxcore2.min.js
23.36.79.43200 OK13 kB
img6.wsimg.com/identity-static-assets/_next/static/chunks/pass-background.ef0f2d9164ab36e3.js
23.36.79.43200 OK2.1 kB
gui.secureserver.net/pcjson/applicationheader?plId=3153&shopperId=&sid=
104.110.14.92200 OK212 B
img6.wsimg.com/auth-assets/4aa15230f448b21526337e8f365c65c3bb92f8af/pass-header-template.js
23.36.79.43200 OK454 B
sso.secureserver.net/favicon.ico
104.110.14.92302 Moved Temporarily0 B
sso.secureserver.net/v1/api/shopper/get_state?app=o365&realm=pass&iframe=false&page=login&orig_app=sso&orig_path=%2Flogin
104.110.14.92200 OK174 B
img6.wsimg.com/auth-assets/4aa15230f448b21526337e8f365c65c3bb92f8af/6072.js
23.36.79.43200 OK36 kB
sso.secureserver.net/v1/?status=21
104.110.14.92308 Permanent Redirect13 B
sso.secureserver.net/v1?status=21
104.110.14.92308 Permanent Redirect11 B
sso.secureserver.net/149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/fp?x-kpsdk-v=j-0.0.0
104.110.14.92429 Too Many Requests142 kB
sso.secureserver.net/?status=21
104.110.14.92200 OK44 kB
img1.wsimg.com/signals/js/clients/tti/tti.min.js
23.36.79.43200 OK7.6 kB
unpkg.com/@elastic/apm-rum@5.9.1/dist/bundles/elastic-apm-rum.umd.min.js
104.16.123.175200 OK91 kB
sso.secureserver.net/149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/tl
104.110.14.92 15 B
events.api.secureserver.net/pageEvents.aspx?visitor_guid=0ebfa5af-4b8a-4775-b474-2b44aa7dc3b1&visit_guid=0ebfa5af-4b8a-4775-b474-2b44aa7dc3b1&delegated=false&agent=false&page_count=1&location=https%3A%2F%2Fsso.secureserver.net%2Flogin%3Fapp%3Do365%26realm%3Dpass&sitename=sso.secureserver.net&page=%2Flogin&referrer=&marketid=en-US&privatelabelid=3153&has_consent=1&cv=0.7.4&client_name=scc-gpl-c1&trace_id=a1b4771af4237ce5f43a197bd3029885&rand=218328334&same_site=None&salessite=false&corrid=1476466146&eventdate=2024-03-28T17%3A59%3A12.493Z&timestamp=1711648752493&hit_id=0c2b4e9c-3c46-40db-b185-a2599f23be16&event_type=page.event&eventtype=load&e_id=sso.login_panel.sso_landing.o365.page.load&loadSource=gasket&server=auth-ui-79b696c56b-lk69k&page_level_properties=loadSource%2Cserver
2.22.31.34200 OK43 B
events.api.secureserver.net/image.aspx?visitor_guid=0ebfa5af-4b8a-4775-b474-2b44aa7dc3b1&visit_guid=0ebfa5af-4b8a-4775-b474-2b44aa7dc3b1&delegated=false&agent=false&page_count=1&location=https%3A%2F%2Fsso.secureserver.net%2Flogin%3Fapp%3Do365%26realm%3Dpass&sitename=sso.secureserver.net&page=%2Flogin&referrer=&privatelabelid=3153&has_consent=0&cv=0.7.4&client_name=scc-gpl-c1&trace_id=a1b4771af4237ce5f43a197bd3029885&rand=1724103400&same_site=None&salessite=false&corrid=1476466146&eventdate=2024-03-28T17%3A59%3A11.274Z&timestamp=1711648751274&hit_id=148989d8-4574-497c-98ea-b50b9ee88892&event_type=page.request&browx=1280&browy=1024&resx=1280&resy=1024&querystring=app%3Do365%26realm%3Dpass&traced=true&loadSource=gasket&server=auth-ui-79b696c56b-lk69k&page_level_properties=loadSource%2Cserver
2.22.31.34302 Found0 B
events.api.secureserver.net/pageEvents.aspx?visitor_guid=0ebfa5af-4b8a-4775-b474-2b44aa7dc3b1&visit_guid=0ebfa5af-4b8a-4775-b474-2b44aa7dc3b1&delegated=false&agent=false&page_count=1&location=https%3A%2F%2Fsso.secureserver.net%2Flogin%3Fapp%3Do365%26realm%3Dpass&sitename=sso.secureserver.net&page=%2Flogin&referrer=&marketid=en-US&privatelabelid=3153&has_consent=1&cv=0.7.4&client_name=scc-gpl-c1&trace_id=a1b4771af4237ce5f43a197bd3029885&rand=119688492&same_site=None&salessite=false&corrid=1476466146&eventdate=2024-03-28T17%3A59%3A12.486Z&timestamp=1711648752486&hit_id=75e9f856-207a-41b2-8d83-eeee8aaf349b&event_type=page.event&eventtype=load&e_id=sso.login_panel.landing.page.load&loadSource=gasket&server=auth-ui-79b696c56b-lk69k&page_level_properties=loadSource%2Cserver
2.22.31.34200 OK43 B
events.api.secureserver.net/b.aspx?visitor_guid=0ebfa5af-4b8a-4775-b474-2b44aa7dc3b1&visit_guid=0ebfa5af-4b8a-4775-b474-2b44aa7dc3b1&delegated=false&agent=false&page_count=1&location=https%3A%2F%2Fsso.secureserver.net%2Flogin%3Fapp%3Do365%26realm%3Dpass&sitename=sso.secureserver.net&page=%2Flogin&referrer=&marketid=en-US&privatelabelid=3153&has_consent=1&cv=0.7.4&client_name=scc-gpl-c1&trace_id=a1b4771af4237ce5f43a197bd3029885&rand=204621218&same_site=None&salessite=false&corrid=1476466146&eventdate=2024-03-28T17%3A59%3A12.504Z&timestamp=1711648752504&hit_id=72a5bd26-dca2-4f5a-94a6-6f93c9b5b25a&event_type=page.log&eventtype=pageperf&e_id=traffic.tcc.instrumentation.navigation.timing&navigationType=navigate&nav_type=hard&transferSize=44360&encodedBodySize=43088&decodedBodySize=204268&connectEnd=1711648749556&connectStart=1711648749539&domComplete=1711648752472&domContentLoadedEventEnd=1711648751292&domContentLoadedEventStart=1711648751277&domInteractive=1711648751150&domLoading=1711648750160&domainLookupEnd=1711648749539&domainLookupStart=1711648749407&navigationStart=1711648748472&requestStart=1711648749556&responseEnd=1711648750035&responseStart=1711648750033&loadEventStart=1711648752472&loadEventEnd=0&marks=&measures=Next.js-before-hydration%2C2723%5ENext.js-hydration%2C21&fcp=2560&loadSource=gasket&server=auth-ui-79b696c56b-lk69k&page_level_properties=loadSource%2Cserver
2.22.31.34200 OK43 B
csp.secureserver.net/eventbus
104.110.14.92202 Accepted0 B
csp.secureserver.net/eventbus
104.110.14.92202 Accepted0 B
events.api.secureserver.net/image.aspx?visitor_guid=0ebfa5af-4b8a-4775-b474-2b44aa7dc3b1&visit_guid=0ebfa5af-4b8a-4775-b474-2b44aa7dc3b1&delegated=false&agent=false&page_count=1&location=https%3A%2F%2Fsso.secureserver.net%2Flogin%3Fapp%3Do365%26realm%3Dpass&sitename=sso.secureserver.net&page=%2Flogin&referrer=&privatelabelid=3153&has_consent=0&cv=0.7.4&client_name=scc-gpl-c1&trace_id=a1b4771af4237ce5f43a197bd3029885&rand=1724103400&same_site=None&salessite=false&corrid=1476466146&eventdate=2024-03-28T17%3A59%3A11.274Z&timestamp=1711648751274&hit_id=148989d8-4574-497c-98ea-b50b9ee88892&event_type=page.request&browx=1280&browy=1024&resx=1280&resy=1024&querystring=app%3Do365%26realm%3Dpass&traced=true&loadSource=gasket&server=auth-ui-79b696c56b-lk69k&page_level_properties=loadSource%2Cserver&CookieTest=1
2.22.31.34200 OK43 B
csp.secureserver.net/eventbus
104.110.14.92202 Accepted0 B
csp.secureserver.net/eventbus
104.110.14.92202 Accepted0 B
cca039482a104d5d9b04bd2e20f6bb64.apm.us-west-2.aws.found.io:9243/intake/v2/rum/events
54.212.23.110200 OK0 B
cca039482a104d5d9b04bd2e20f6bb64.apm.us-west-2.aws.found.io:9243/intake/v2/rum/events
54.212.23.110200 OK0 B
www.googletagmanager.com/gtag/js?id=UA-115508484-1&l=_analyticsDataLayer
142.250.74.72200 OK195 kB