Report Overview

  1. Visited public
    2023-12-08 11:54:08
  2. URL

    plagueworksinc.com/ess/cbd/vheqml/ZGFycmVuLmdvbGRAdHJpdW1ncm91cC5jb20=

  3. Finishing URL

    ubiquityu.org/redirect.cgi?ref=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

  4. IP / ASN
    162.241.114.35

    #46606 UNIFIEDLAYER-AS-1

    Title
    lhutykwhwj
  5. Phishing - Microsoft Outlook

Detections
urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
aadcdn.msauth.net14212018-10-252018-11-19 11:50:032023-12-07 18:13:05
aadcdn.msftauthimages.net46222018-11-122019-08-14 20:22:232023-12-06 09:55:37
plagueworksinc.comunknown2020-05-222020-05-22 02:29:512023-12-08 12:02:04
vickishuloftherapy.orgunknown2023-12-062021-02-03 10:48:292023-12-08 12:06:18
ubiquityu.orgunknown2023-12-062021-02-03 10:41:532021-02-03 10:41:53
outlook.office365.com512005-06-202013-04-11 01:09:242021-03-15 09:11:50
r4.res.office365.com1802005-06-202017-03-03 13:49:032023-12-07 07:29:20
autologon.microsoftazuread-sso.com15342016-07-222017-01-30 09:17:572023-12-07 19:35:01

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (189)

HTTP Transactions (38)

URLIPResponseSize
plagueworksinc.com/ess/cbd/vheqml/ZGFycmVuLmdvbGRAdHJpdW1ncm91cC5jb20=
162.241.114.35 0 B
vickishuloftherapy.org/?mxsebzhb&email=darren.gold@triumgroup.com
161.35.214.39302 Found0 B
ubiquityu.org/?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3ViaXF1aXR5dS5vcmciLCJkb21haW4iOiJ1YmlxdWl0eXUub3JnIiwia2V5IjoiTWMxN3ZCcklXUEd1IiwicXJjIjoiZGFycmVuLmdvbGRAdHJpdW1ncm91cC5jb20iLCJpYXQiOjE3MDIwMzY0MjksImV4cCI6MTcwMjAzNjU0OX0.O1qbPu8f8HESMB1qC5QGMkrM5B9tz9C5TqaOk-hCoNo
161.35.214.39302 Found0 B
ubiquityu.org/?qrc=darren.gold%40triumgroup.com
161.35.214.39302 Moved Temporarily0 B
ubiquityu.org/owa/?login_hint=darren.gold%40triumgroup.com
161.35.214.39302 Found1.4 kB
ubiquityu.org/aadcdn.msftauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0gg2.css
161.35.214.39200 OK20 kB
ubiquityu.org/aadcdn.msftauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_xQ_4cu5kMxqWy6T1zLKcgw2.js
161.35.214.39200 OK689 kB
ubiquityu.org/aadcdn.msftauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
161.35.214.39200 OK17 kB
ubiquityu.org/aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif
161.35.214.39200 OK3.6 kB
ubiquityu.org/aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif
161.35.214.39200 OK2.7 kB
outlook.office365.com/owa/prefetch.aspx
40.101.1.0200 OK2.7 kB
ubiquityu.org/aadcdn.msftauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg
161.35.214.39200 OK987 B
ubiquityu.org/aadcdn.msftauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
161.35.214.39200 OK1.4 kB
ubiquityu.org/aadcdn.msftauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png
161.35.214.39200 OK5.1 kB
ubiquityu.org/aadcdn.msftauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg
161.35.214.39200 OK18 kB
r4.res.office365.com/owa/prem/15.20.7068.28/scripts/boot.worldwide.0.mouse.js
23.36.79.11200 OK180 kB
r4.res.office365.com/owa/prem/15.20.7068.28/scripts/boot.worldwide.1.mouse.js
23.36.79.11200 OK163 kB
r4.res.office365.com/owa/prem/15.20.7068.28/scripts/boot.worldwide.2.mouse.js
23.36.79.11200 OK170 kB
r4.res.office365.com/owa/prem/15.20.7068.28/scripts/boot.worldwide.3.mouse.js
23.36.79.11200 OK146 kB
r4.res.office365.com/owa/prem/15.20.7068.28/resources/images/0/sprite1.mouse.png
23.36.79.11200 OK132 B
r4.res.office365.com/owa/prem/15.20.7068.28/resources/images/0/sprite1.mouse.css
23.36.79.11200 OK288 B
r4.res.office365.com/owa/prem/15.20.7068.28/resources/styles/0/boot.worldwide.mouse.css
23.36.79.11200 OK44 kB
autologon.microsoftazuread-sso.com/triumgroup.com/winauth/iframe?client-request-id=d73edb6d-5028-ad41-9c0f-16dc51dc08df&isAdalRequest=False
20.190.181.1200 OK7.2 kB
r4.res.office365.com/owa/prem/15.20.7068.28/resources/styles/fonts/office365icons.woff
23.36.79.11200 OK78 kB
r4.res.office365.com/owa/prem/15.20.7068.28/resources/styles/fonts/office365icons.woff
23.36.79.11200 OK78 kB
aadcdn.msauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
13.107.246.53 40 kB
aadcdn.msauth.net/ests/2.1/content/cdnbundles/dsso.iframe.min_ola-etxskuesqyfim_hgua2.js
13.107.246.53 4.4 kB
ubiquityu.org/common/instrumentation/dssostatus
161.35.214.39200 OK265 B
ubiquityu.org/aadcdn.msftauth.net/~/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
161.35.214.39200 OK276 B
aadcdn.msftauthimages.net/dbd5a2dd-exqy-3gpbydae9zlab-esqcx2rpx-syvlxy35xtrln4/logintenantbranding/0/headerlogo?ts=638072437146390495
13.107.213.53200 OK7.6 kB
aadcdn.msftauthimages.net/dbd5a2dd-exqy-3gpbydae9zlab-esqcx2rpx-syvlxy35xtrln4/logintenantbranding/0/illustration?ts=638072437154799144
13.107.213.53200 OK231 kB
aadcdn.msftauthimages.net/dbd5a2dd-exqy-3gpbydae9zlab-esqcx2rpx-syvlxy35xtrln4/logintenantbranding/0/bannerlogo?ts=638072437112231643
13.107.213.53200 OK7.6 kB
aadcdn.msftauthimages.net/dbd5a2dd-exqy-3gpbydae9zlab-esqcx2rpx-syvlxy35xtrln4/logintenantbranding/0/favicon?ts=638072437135294744
13.107.213.53200 OK4.8 kB
ubiquityu.org/aadcdn.msftauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_f7b06b70c72b4590b779.js
161.35.214.39200 OK24 kB
ubiquityu.org/aadcdn.msftauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js
161.35.214.39200 OK110 kB
ubiquityu.org/redirect.cgi?ref=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
161.35.214.39200 OK43 kB
ubiquityu.org/aadcdn.msftauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_fmhisaxpoaglzwf5og-iag2.js
161.35.214.39200 OK53 kB
ubiquityu.org/aadcdn.msftauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_ae573f441ee1cf781ec7.js
161.35.214.39200 OK16 kB