Report Overview

  1. Submitted URL

    cert.login.dan.ske.20-208-136-239.cprapid.com/id/swelogin.php

  2. IP

    20.208.136.239

    ASN

    #8075 MICROSOFT-CORP-MSN-AS-BLOCK

  3. Submitted

    2022-11-24 15:34:37

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    Phishing - Nordea

    Phishing - Nordea

Detections

  1. urlquery

    6

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    20

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
de.tynt.com12520001-01-01T00:00:00Z0001-01-01T00:00:00Z
cert.login.dan.ske.20-208-136-239.cprapid.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.sectigo.com4870001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
widgets.amung.us126230001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
t.dtscout.com119510001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
whos.amung.us126870001-01-01T00:00:00Z0001-01-01T00:00:00Z
ic.tynt.com43000001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn.tynt.com72600001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumcert.login.dan.ske.20-208-136-239.cprapid.com/id/swelogin.phpPhishing
mediumcert.login.dan.ske.20-208-136-239.cprapid.com/id/partials/js/jquery.jsPhishing
mediumcert.login.dan.ske.20-208-136-239.cprapid.com/id/all/bankidno-4ea331ae4c5bc3a12e6cf8340862d4c0.svgPhishing
mediumcert.login.dan.ske.20-208-136-239.cprapid.com/assets/aa78d594083d0ccfefcf-d2c5355e1fcc507cd7b7389e87e6c9de.svgPhishing
mediumcert.login.dan.ske.20-208-136-239.cprapid.com/assets/3defb92f3d1f7309bb86-28abb007069a4e48b1a0830fb5d4a822.svgPhishing
mediumcert.login.dan.ske.20-208-136-239.cprapid.com/assets/aa1ee103968475b48934-3a4d9a8b6adf39716f28af71fc9b030a.woffPhishing
mediumcert.login.dan.ske.20-208-136-239.cprapid.com/assets/837ba80d0ba906e8c20d-4fa38d775a1f6b9179bc7c425ecaf7f4.woffPhishing
mediumcert.login.dan.ske.20-208-136-239.cprapid.com/assets/b90f1e1b93f3b23dd79e-11eca7aa5a85ec0c6cc3deba794b264e.woffPhishing
mediumcert.login.dan.ske.20-208-136-239.cprapid.com/id/partials/status.phpPhishing
mediumcert.login.dan.ske.20-208-136-239.cprapid.com/id/partials/status.phpPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (12)

HTTP Transactions (45)

URLIPResponseSize
cert.login.dan.ske.20-208-136-239.cprapid.com/id/swelogin.php
20.208.136.239200 OK8.8 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
cert.login.dan.ske.20-208-136-239.cprapid.com/id/all/styles.css
20.208.136.239200 OK49 kB
cert.login.dan.ske.20-208-136-239.cprapid.com/id/partials/js/jquery.js
20.208.136.239200 OK272 kB
cert.login.dan.ske.20-208-136-239.cprapid.com/id/all/bankidno-4ea331ae4c5bc3a12e6cf8340862d4c0.svg
20.208.136.239200 OK2.8 kB
cert.login.dan.ske.20-208-136-239.cprapid.com/id/all/5e73b3c67b0510c4c5cf-6629cb5350d6f3276b2dccc43bd3f397.png
20.208.136.239200 OK40 kB
cert.login.dan.ske.20-208-136-239.cprapid.com/assets/aa78d594083d0ccfefcf-d2c5355e1fcc507cd7b7389e87e6c9de.svg
20.208.136.239404 Not Found10 kB
cert.login.dan.ske.20-208-136-239.cprapid.com/assets/3defb92f3d1f7309bb86-28abb007069a4e48b1a0830fb5d4a822.svg
20.208.136.239404 Not Found10 kB
cert.login.dan.ske.20-208-136-239.cprapid.com/assets/aa1ee103968475b48934-3a4d9a8b6adf39716f28af71fc9b030a.woff
20.208.136.239404 Not Found10 kB
cert.login.dan.ske.20-208-136-239.cprapid.com/assets/837ba80d0ba906e8c20d-4fa38d775a1f6b9179bc7c425ecaf7f4.woff
20.208.136.239404 Not Found10 kB
cert.login.dan.ske.20-208-136-239.cprapid.com/assets/b90f1e1b93f3b23dd79e-11eca7aa5a85ec0c6cc3deba794b264e.woff
20.208.136.239404 Not Found10 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK329 B
cert.login.dan.ske.20-208-136-239.cprapid.com/favicon.ico
20.208.136.239404 Not Found10 kB
ocsp.sectigo.com/
104.18.32.68200 OK472 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
whos.amung.us/pingjs/?k=legionkkkk&t=Nordea%20-%20Tunnistautuminen&c=s&x=http%3A%2F%2Fcert.login.dan.ske.20-208-136-239.cprapid.com%2Fid%2Fswelogin.php&y=&a=0&d=0.689&v=27&r=2679
172.67.8.141200 OK46 B
push.services.mozilla.com/
54.186.117.16101 Switching Protocols0 B
t.dtscout.com/i/?l=http%3A%2F%2Fcert.login.dan.ske.20-208-136-239.cprapid.com%2Fid%2Fswelogin.php&j=
172.64.163.7200 OK1.5 kB
ic.tynt.com/b/p?id=w!legionkkkk&lm=0&ts=1669304066980&dn=TC&iso=0&t=Nordea%20-%20Tunnistautuminen
67.202.105.32204 No Content0 B
ic.tynt.com/b/p?id=w!legionkkkk&lm=0&ts=1669304066980&dn=TC&iso=0&t=Nordea%20-%20Tunnistautuminen
67.202.105.32204 No Content0 B
ic.tynt.com/b/p?id=w!legionkkkk&lm=0&ts=1669304066980&dn=TC&iso=0&t=Nordea%20-%20Tunnistautuminen
67.202.105.32204 No Content0 B
de.tynt.com/deb/v2?id=w!legionkkkk&dn=TC&cc=1&r=
67.202.105.33200 OK4 B
ic.tynt.com/b/p?id=w!legionkkkk&lm=0&ts=1669304066980&dn=TC&iso=0
67.202.105.32204 No Content0 B
ic.tynt.com/b/p?id=w!legionkkkk&lm=0&ts=1669304066980&dn=TC&iso=0
67.202.105.32204 No Content0 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
34.120.237.76200 OK8.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg
34.120.237.76200 OK7.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp
34.120.237.76200 OK5.1 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
34.120.237.76200 OK14 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
34.120.237.76200 OK4.3 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg
34.120.237.76200 OK6.8 kB
ic.tynt.com/b/p?id=w!legionkkkk&lm=0&ts=1669304066980&dn=TC&iso=0
67.202.105.32204 No Content0 B
ic.tynt.com/b/p?id=w!legionkkkk&lm=0&ts=1669304066980&dn=TC&iso=0
67.202.105.32204 No Content0 B
cert.login.dan.ske.20-208-136-239.cprapid.com/id/partials/status.php
20.208.136.239500 Internal Server Error0 B
cert.login.dan.ske.20-208-136-239.cprapid.com/id/partials/status.php
20.208.136.239500 Internal Server Error0 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F707b8d34-3bd2-4793-9e17-c60d0b285f84.jpeg
34.120.237.76200 OK9.8 kB
t.dtscout.com/pv/?_a=v&_h=cert.login.dan.ske.20-208-136-239.cprapid.com&_ss=63mu4lex2a&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=7h6k&_cb=_dtspv.c
172.64.163.7200 OK0 B
widgets.amung.us/small.js
104.22.75.171200 OK0 B
cdn.tynt.com/tc.js
172.64.151.83200 OK0 B