Report Overview

  1. Visited public
    2023-11-21 07:14:54
  2. URL

    events.bizzabo.com/auth/emailAssociatedLogin/verifyTokenAndRedirect?token=S9NcmjZghhHTu-K8Bn2uA9CkNhbMdZVLD_YG9HzIwMWMvvRTd-dklFn2bExx7385&eventGroupId=26969&redirectUrl=https://mycityadvertising.com/email/verification/owrvnu////dGVyYW5jZS50YWt5aUB1YnMuY29t

  3. Finishing URL

    brakem.com/redirect.cgi?ref=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

  4. IP / ASN
    18.233.209.116

    #14618 AMAZON-AES

    Title
    kgb5tl6gd9
  5. Phishing - Microsoft Outlook

Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
challenges.cloudflare.comunknown2009-02-172021-10-20 07:02:032023-11-21 05:09:18
outlook.office365.com512005-06-202013-04-11 01:09:242021-03-15 09:11:50
aadcdn.msftauthimages.net46222018-11-122019-08-14 20:22:232023-11-20 05:28:09
r4.res.office365.com1802005-06-202017-03-03 13:49:032023-11-20 01:53:07
events.bizzabo.com2008372010-10-102013-12-26 08:05:042023-11-20 04:08:04
mycityadvertising.comunknown2006-08-302016-11-21 11:56:232023-11-20 17:23:28
4bfd4ade.23555334c639c3cc5f42b21b.workers.devunknownunknownNo dataNo data
brakem.comunknownunknownNo dataNo data

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (143)

HTTP Transactions (36)

URLIPResponseSize
events.bizzabo.com/auth/emailAssociatedLogin/verifyTokenAndRedirect?token=S9NcmjZghhHTu-K8Bn2uA9CkNhbMdZVLD_YG9HzIwMWMvvRTd-dklFn2bExx7385&eventGroupId=26969&redirectUrl=https://mycityadvertising.com/email/verification/owrvnu////dGVyYW5jZS50YWt5aUB1YnMuY29t
52.2.228.106 236 B
mycityadvertising.com/email/verification/owrvnu////dGVyYW5jZS50YWt5aUB1YnMuY29t?login=ML
69.49.245.172 0 B
POST 4bfd4ade.23555334c639c3cc5f42b21b.workers.dev/?qrc=terance.takyi@ubs.com
188.114.97.1302 Found0 B
GET brakem.com/?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2JyYWtlbS5jb20iLCJkb21haW4iOiJicmFrZW0uY29tIiwia2V5IjoiNHhxalZqYWhLNnBXIiwicXJjIjoidGVyYW5jZS50YWt5aUB1YnMuY29tIiwiaWF0IjoxNzAwNTUwODgwLCJleHAiOjE3MDA1NTEwMDB9.EljPHPVW_2vVxfuRvJ9l3SN4vPWVHUw71h465qSOXjo
193.109.120.226302 Found0 B
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/829722fdd954b4f4/1700550876140/431600ed290b855d87d096e56d4485ac374fb5d4f8afa3e16eae204177c9dc30/KaV5a340ljs9i2C
104.17.3.184401 Unauthorized1 B
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1861868115:1700548076:Lif2yPGT1Dy7gDeOr4r3nok5xqpL-2Z5sug94mK52vs/829722fdd954b4f4/c5e603bf7e7f9ce
104.17.3.184200 OK67 kB
GET challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.17.3.184302 Found50 kB
GET brakem.com/aadcdn.msftauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_o-ZZReABRa0UshwWo2BEBw2.js
193.109.120.226200 OK689 kB
GET brakem.com/aadcdn.msftauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
193.109.120.226200 OK17 kB
GET outlook.office365.com/owa/prefetch.aspx
52.98.228.210200 OK1.2 kB
GET brakem.com/aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif
193.109.120.226200 OK2.7 kB
GET brakem.com/aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif
193.109.120.226200 OK3.6 kB
GET brakem.com/aadcdn.msftauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_orpt-59zawtpatdv5lgnaa2.js
193.109.120.226200 OK196 kB
GET aadcdn.msftauthimages.net/c1c6b6c8-3ryhipbfkhxxwptmyqh8tcus4iat4acfnhdjhttbkbi/logintenantbranding/0/bannerlogo?ts=637058688700493492
13.107.213.53200 OK3.0 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2%2BU%3D
104.17.3.184200 OK180 kB
GET r4.res.office365.com/owa/prem/15.20.7002.28/scripts/boot.worldwide.1.mouse.js
23.36.79.11200 OK163 kB
GET r4.res.office365.com/owa/prem/15.20.7002.28/scripts/boot.worldwide.2.mouse.js
23.36.79.11200 OK170 kB
GET r4.res.office365.com/owa/prem/15.20.7002.28/scripts/boot.worldwide.3.mouse.js
23.36.79.11200 OK146 kB
GET r4.res.office365.com/owa/prem/15.20.7002.28/resources/images/0/sprite1.mouse.png
23.36.79.11200 OK132 B
GET r4.res.office365.com/owa/prem/15.20.7002.28/resources/images/0/sprite1.mouse.css
23.36.79.11200 OK288 B
GET r4.res.office365.com/owa/prem/15.20.7002.28/resources/styles/0/boot.worldwide.mouse.css
23.36.79.11200 OK44 kB
GET r4.res.office365.com/owa/prem/15.20.7002.28/resources/styles/fonts/office365icons.woff
23.36.79.11200 OK78 kB
GET r4.res.office365.com/owa/prem/15.20.7002.28/resources/styles/fonts/office365icons.woff
23.36.79.11200 OK78 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=829722fdd954b4f4
104.17.3.184200 OK174 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/829722fdd954b4f4/1700550876137/1Qf8Dx_AzIY9FV-
104.17.3.184200 OK61 B
GET brakem.com/aadcdn.msftauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0gg2.css
193.109.120.226200 OK112 kB
GET brakem.com/owa/?login_hint=terance.takyi%40ubs.com
193.109.120.226302 Found42 kB
GET r4.res.office365.com/owa/prem/15.20.7002.28/scripts/boot.worldwide.0.mouse.js
23.36.79.11200 OK664 kB
GET 4bfd4ade.23555334c639c3cc5f42b21b.workers.dev/favicon.ico
188.114.97.1200 OK3.3 kB
GET brakem.com/redirect.cgi?ref=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
193.109.120.226200 OK42 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/irhq6/0x4AAAAAAANZ6huOM07-rc92/auto/normal
104.17.3.184200 OK73 kB
GET brakem.com/aadcdn.msftauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js
193.109.120.226200 OK110 kB
GET aadcdn.msftauthimages.net/c1c6b6c8-3ryhipbfkhxxwptmyqh8tcus4iat4acfnhdjhttbkbi/logintenantbranding/0/illustration?ts=637058688689463941
13.107.213.53200 OK181 kB
GET brakem.com/aadcdn.msftauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pconfirmsend_964df482332b296c7a9c.js
193.109.120.226200 OK11 kB
GET challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?onload=onloadTurnstileCallback
104.17.3.184200 OK34 kB
GET brakem.com/?qrc=terance.takyi%40ubs.com
193.109.120.226302 Moved Temporarily42 kB