urlquery Phishing - Microsoft
VerdictPhishing
Severitymedium
WEBSITE ANALYSIS REPORT
https://linklock.titanhq.com/analyse?url=https%3A%2F%2Fsecure-web.cisco.com%2F1L6M934JiiQMuRw7qEACVd9wV54Fme3ZN77eE2iMWotFnUQlBl-1xQkMdqmEleDlVyWK-K-_-xOroNUwGTXsxt-9bQ1FIS0wpoCUX_J5Hlujds4qQzlxEQWOYgh-A4I9jq0KUKJxNjQHp74SeORHCXTSKcCSGAo1Qldh8N0jbUtWEYSx7IQJNHeNNLUybjY2BX-uyHWQCKPh_PwZCxQzhvfG4vIcyZdVg0O0N5dVq7nqfRR7DxmVp2me1O0eeTEwF6Q0w76l2WEvaLRaeUnm6vXpvcA3ifZlNgmNeMUwtvSv6R8sDBPHnAS6sefbzFLAJMfw3t5Kqef6SP-dFaQbQ0Yu67EbIXDx6vaEn5lMC-IIK2qCpdzizJNhQoW4HPVwPsuhtpx5t88uWr3Uz8jlT1TXQ5NaF5jqytZDSXypEibCBkg90-J4Wb_mztl0bezobrnSD7D7IMUMpvMNm4XHjpw%2Fhttps%253A%252F%252Fsso.learn4job.tn%252F&data=eJxUkkuPqkgAhX-NvZikSAlVoMk4GeTRKgIWiNBuOjwKgcub4iG_ftJ3Vnd5zvl254sPO4iRiMUQhLtIACgKYxDhJAFikmIKUUoRij-Sw18f1eFv09neeBGZR7TdC1hQ4ZHfayqURBnxGMK9IIvoKP_7B8bpjvyTuJtjq5zt3a-2bXCKbf7zMRwKmqZcG5YV7TcIDpRlNR0G0DfdSBmjXNxUH_0hKcP3BsGmZk3bN02a16_fy3jIGGuHjSBveH3D6wONx56CmUZcnA9x8wNteH17Fc29gC55TszRmaVOk5VHsp8fGOkVFZ6WJFGNz02_YXrtkfJYgu1CfplJV2klVcvH2zeAAb7BYveN5c2f92BYGNhHZKufXTi3jeIF3xd8KsciGVBH1nLRiG9_vTIgo_O-6KDhGZfFKsiplZBLbeekBHfXiBX3U262pEyynQWLyGO-9uUu0plcrBO1rKv3joov_hiA8X3yiWLcsu_b_FQWsmZT-ommc_x-Jo8XtKGFk0cn1V3qOJK6VI-Wr-jWhpTetVkXCZwlseR9bQqvTki9uhKnoJ1iWcjTZ2m9Koua3swmdxKd3aAeb6dadsWBptGqX-WLmc4Cw0ZHU9G9gUQPSUTg1yhKWnQO1EWcQq3GpamA89ngO6VN1ny9WBlpfHS6PebbMGasXTDb7Ua_F7x1V5T37T0g2Ap1XHRv9lTd4N1qeaQcf732EFyQH31XKythRNcm6mtXlVTpbHpmO5lWhYJT0c4bXv__fh7_CIB_FMC8PgwNV9Kwr1HRRByrf5f_BQAA___tIu_Z#819ad74c40002bfcc1a3940f24c447c1=ZGRmZGZkLmduZ2hnbmdAc2Rmc2RmZi5jb20=
public
Phishing detected
Review evidence →6 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://linklock.titanhq.com/analyse?url=https%3A%2F%2Fsecure-web.cisco.com%2F1L6M934JiiQMuRw7qEACVd9wV54Fme3ZN77eE2iMWotFnUQlBl-1xQkMdqmEleDlVyWK-K-_-xOroNUwGTXsxt-9bQ1FIS0wpoCUX_J5Hlujds4qQzlxEQWOYgh-A4I9jq0KUKJxNjQHp74SeORHCXTSKcCSGAo1Qldh8N0jbUtWEYSx7IQJNHeNNLUybjY2BX-uyHWQCKPh_PwZCxQzhvfG4vIcyZdVg0O0N5dVq7nqfRR7DxmVp2me1O0eeTEwF6Q0w76l2WEvaLRaeUnm6vXpvcA3ifZlNgmNeMUwtvSv6R8sDBPHnAS6sefbzFLAJMfw3t5Kqef6SP-dFaQbQ0Yu67EbIXDx6vaEn5lMC-IIK2qCpdzizJNhQoW4HPVwPsuhtpx5t88uWr3Uz8jlT1TXQ5NaF5jqytZDSXypEibCBkg90-J4Wb_mztl0bezobrnSD7D7IMUMpvMNm4XHjpw%2Fhttps%253A%252F%252Fsso.learn4job.tn%252F&data=eJxUkkuPqkgAhX-NvZikSAlVoMk4GeTRKgIWiNBuOjwKgcub4iG_ftJ3Vnd5zvl254sPO4iRiMUQhLtIACgKYxDhJAFikmIKUUoRij-Sw18f1eFv09neeBGZR7TdC1hQ4ZHfayqURBnxGMK9IIvoKP_7B8bpjvyTuJtjq5zt3a-2bXCKbf7zMRwKmqZcG5YV7TcIDpRlNR0G0DfdSBmjXNxUH_0hKcP3BsGmZk3bN02a16_fy3jIGGuHjSBveH3D6wONx56CmUZcnA9x8wNteH17Fc29gC55TszRmaVOk5VHsp8fGOkVFZ6WJFGNz02_YXrtkfJYgu1CfplJV2klVcvH2zeAAb7BYveN5c2f92BYGNhHZKufXTi3jeIF3xd8KsciGVBH1nLRiG9_vTIgo_O-6KDhGZfFKsiplZBLbeekBHfXiBX3U262pEyynQWLyGO-9uUu0plcrBO1rKv3joov_hiA8X3yiWLcsu_b_FQWsmZT-ommc_x-Jo8XtKGFk0cn1V3qOJK6VI-Wr-jWhpTetVkXCZwlseR9bQqvTki9uhKnoJ1iWcjTZ2m9Koua3swmdxKd3aAeb6dadsWBptGqX-WLmc4Cw0ZHU9G9gUQPSUTg1yhKWnQO1EWcQq3GpamA89ngO6VN1ny9WBlpfHS6PebbMGasXTDb7Ua_F7x1V5T37T0g2Ap1XHRv9lTd4N1qeaQcf732EFyQH31XKythRNcm6mtXlVTpbHpmO5lWhYJT0c4bXv__fh7_CIB_FMC8PgwNV9Kwr1HRRByrf5f_BQAA___tIu_Z#819ad74c40002bfcc1a3940f24c447c1=ZGRmZGZkLmduZ2hnbmdAc2Rmc2RmZi5jb20=
- Submitted IP / ASN
3.69.98.154 AS16509 · AMAZON-02
- Final URL
- https://bconiey.com/e/j1qcac?d=Lz9sb2dpbl9oaW50PWRkZmRmZC5nbmdoZ25nQHNkZnNkZmYuY29t
- Final IP / ASN
188.114.96.1 AS13335 · CLOUDFLARENET
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 1.1 KB (1104 bytes)
Detections
Activity
- HTTP requests
- 38
- Observed hosts
- 7
- Script records
- 236
Estimated HTTP data
- Sent
- ~233.4 KB
- Received
- ~2.08 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
3urlquery Phishing - Microsoft Outlook
VerdictPhishing
Severitymedium
urlquery Phishing - Gcore Phishing Kit
VerdictPhishing
Severityhigh
Threat Detection Systems
2DNS4EU Sinkholed
VerdictMalicious
Severitymedium
Hagezi Threat Feed Sinkholed
VerdictMalicious
Severitymedium
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| sso.learn4job.tn 6 alerts | N/A | 2020-07-08 | 2026-03-23 | 2026-03-23 | 3.2 KB | 5.4 KB |  192.3.7.7 | Apache HTTP Server Web servers Apache is a free and open-source cross-platform web server software. |
| challenges.cloudflare.com | 11393 | 2009-02-17 | 2021-10-20 | 2026-03-22 | 6.4 KB | 602.1 KB | 104.18.94.41 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| bconiey.com 58 alerts | N/A | 2026-01-28 | 2026-03-23 | 2026-03-23 | 22.9 KB | 1.47 MB | 188.114.96.1 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| portal.microsoftonline.com | 222862 | 2002-07-09 | 2014-01-23 | 2026-03-19 | 546 B | 1.8 KB | 150.171.74.13 | |
| linklock.titanhq.com | 1716149 | 2013-05-03 | 2021-08-20 | 2026-03-18 | 1.8 KB | 2.7 KB | 3.124.33.45 | |
| secure-web.cisco.com | 197347 | 1987-05-14 | 2014-02-25 | 2026-03-23 | 994 B | 2.2 KB | 146.112.255.69 | OpenResty:1.27.1.2 Web servers OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| res.public.onecdn.static.microsoft | 930 | 2023-05-05 | 2024-03-21 | 2026-03-18 | 470 B | 4.3 KB |  23.36.76.179 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |