WEBSITE ANALYSIS REPORT
https://login.secure-crossriver.com/bZpEBFBm?uid=4c9c93df-f92e-4068-ae84-1251b8d4417d
public
Phishing detected
Review evidence →6 detections · review the detection signals
Indicators
Exact observed values · repeated evidence is grouped by type and value
| Kind | Value | Signals | Copy |
|---|---|---|---|
| IP | 16.52.153.229 | URLQuery 9IDS 0TDS 6 | |
| Domain | msauth.net | URLQuery 0IDS 0TDS 0 | |
| Domain | secure-crossriver.com | URLQuery 9IDS 0TDS 6 | |
| FQDN | aadcdn.msauth.net | URLQuery 0IDS 0TDS 0 | |
| FQDN | login.secure-crossriver.com | URLQuery 8IDS 0TDS 4 | |
| FQDN | www.secure-crossriver.com | URLQuery 1IDS 0TDS 2 | |
| URL | https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_pzfy2abhlubh6bv_dyvwha2.css | URLQuery 0IDS 0TDS 0 | |
| URL | https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_uhq9m5ofgcbvjcqhlkybyw2.js | URLQuery 0IDS 0TDS 0 | |
| URL | https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico | URLQuery 0IDS 0TDS 0 | |
| URL | https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_0VaiIU2YQ2Ha0HQI5MKqTQ2.js | URLQuery 0IDS 0TDS 0 | |
| URL | https://login.secure-crossriver.com/ | URLQuery 2IDS 0TDS 1 | |
| URL | https://login.secure-crossriver.com/bZpEBFBm?uid=4c9c93df-f92e-4068-ae84-1251b8d4417d | URLQuery 2IDS 0TDS 1 | |
| URL | https://login.secure-crossriver.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639282546856236262.Yjg1YjZjYTYtYzgyMi00NDZhLWJiNmEtNTcxY2I0NDZlZDlkODVmMjQ3ZDYtYWY1OS00NDk0LWFhNjMtMjlhYzE2NWVjYzU1&ui_locales=en-US&mkt=en-US&client-request-id=1ccd788f-6805-47aa-a3b7-e8290d478ff2&siwa=1&siwg=1&state=R2lyHt12SGhCmWFtQmTDOxgbMDmCkwJkKgo08kVtOOSC1D-I33Z1mODh9n-whq6C4-7e1L0tnmCznjNsAvMWQAn9qyURp5opKjL6rEEPMAqTyfKRPHshIX6tHprfUMvUGce777u29ouzXzR-IOhKFoegi7a3uayQpXsrbcGKF8kp4EDSGj9LQ8NOONj0pd9LiorE2OEyYsUhm3kOHVThyRa6kaw532TPrTVx0V5E5RQVx53idJ37Pg7qJ-9F51UMib5w-dIG0FFtsx_uzcGwsxt9CgPMpp2XD6wgVpzcuGPpeq0_zdK-KsXkIDBNK5DN4k4ALryF8AQPdua_PhXYVXK7iBiricgXT_nHsXLGRsX5HKRrh0FAlfZe9H8NajunSlma2erzrA_daD37foxB5JKPMOPPEGO4xk5g9VwEL2VKbfPnQwoB_lxtQNIv6I4P&x-client-SKU=ID_NET8_0&x-client-ver=8.16.0.0 | URLQuery 2IDS 0TDS 1 | |
| URL | https://login.secure-crossriver.com/s/1cff9e8fc6510c81261b5d75e97e8f5940bbf0fb42207a8557d058d2756ab8d3.js | URLQuery 2IDS 0TDS 1 | |
| URL | https://www.secure-crossriver.com/login | URLQuery 1IDS 0TDS 2 | |
| SHA256 | 31c85bfb9cd0ccda99a22980a6d7b839d8ba03e343887070104c299a1e253cc5 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 35abe35a33e9f9191ff96a5a86eda4bbed1b27d8ba9aea5a1d2c52589150a3fc | URLQuery 2IDS 0TDS 1 | |
| SHA256 | 4858e0fb38c2dcb761702517b231d14c245f82c14d9f1151c04cc4327345ab25 | URLQuery 2IDS 0TDS 1 | |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 | URLQuery 5IDS 0TDS 4 |
No indicators match the current filters.