Report Overview

  1. Visited public
    2023-11-21 07:15:17
  2. URL

    mycityadvertising.com/email/verification/itvu1p/ZGVuaXNlLmNvcnNldHRpQHVicy5jb20=?login=ML

  3. Finishing URL

    kiedlng.com/redirect.cgi?ref=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

  4. IP / ASN
    69.49.245.172

    #46606 UNIFIEDLAYER-AS-1

    Title
    tnhxuaqz1z
  5. Phishing - Microsoft Outlook

Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
challenges.cloudflare.comunknown2009-02-172021-10-20 07:02:032023-11-21 05:09:18
mycityadvertising.comunknown2006-08-302016-11-21 11:56:232023-11-20 17:23:28
4bfd4ade.23555334c639c3cc5f42b21b.workers.devunknownunknownNo dataNo data
kiedlng.comunknownunknown2023-11-20 13:28:102023-11-21 06:22:02
outlook.office365.com512005-06-202013-04-11 01:09:242021-03-15 09:11:50
r4.res.office365.com1802005-06-202017-03-03 13:49:032023-11-21 05:24:32
aadcdn.msftauthimages.net46222018-11-122019-08-14 20:22:232023-11-20 05:28:09

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (143)

HTTP Transactions (36)

URLIPResponseSize
mycityadvertising.com/email/verification/itvu1p/ZGVuaXNlLmNvcnNldHRpQHVicy5jb20=?login=ML
69.49.245.172 0 B
4bfd4ade.23555334c639c3cc5f42b21b.workers.dev/?qrc=denise.corsetti@ubs.com
188.114.96.1200 OK0 B
kiedlng.com/?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2tpZWRsbmcuY29tIiwiZG9tYWluIjoia2llZGxuZy5jb20iLCJrZXkiOiJkQWEyY2kxb3pTRHEiLCJxcmMiOiJkZW5pc2UuY29yc2V0dGlAdWJzLmNvbSIsImlhdCI6MTcwMDU1MDkwMCwiZXhwIjoxNzAwNTUxMDIwfQ.zmPzDhYIVXY202CXMK4ZGduIHA2wlBtEJM_IBKYejto
193.109.120.226302 Found0 B
kiedlng.com/?qrc=denise.corsetti%40ubs.com
193.109.120.226302 Moved Temporarily0 B
kiedlng.com/owa/?login_hint=denise.corsetti%40ubs.com
193.109.120.226302 Found1.4 kB
kiedlng.com/aadcdn.msftauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0gg2.css
193.109.120.226200 OK20 kB
kiedlng.com/aadcdn.msftauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_o-ZZReABRa0UshwWo2BEBw2.js
193.109.120.226200 OK689 kB
kiedlng.com/aadcdn.msftauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
193.109.120.226200 OK17 kB
outlook.office365.com/owa/prefetch.aspx
40.101.1.0200 OK1.2 kB
kiedlng.com/aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif
193.109.120.226200 OK2.7 kB
kiedlng.com/aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif
193.109.120.226200 OK3.6 kB
r4.res.office365.com/owa/prem/15.20.7002.28/scripts/boot.worldwide.0.mouse.js
23.36.79.11200 OK180 kB
r4.res.office365.com/owa/prem/15.20.7002.28/scripts/boot.worldwide.1.mouse.js
23.36.79.11200 OK163 kB
r4.res.office365.com/owa/prem/15.20.7002.28/scripts/boot.worldwide.2.mouse.js
23.36.79.11200 OK170 kB
r4.res.office365.com/owa/prem/15.20.7002.28/scripts/boot.worldwide.3.mouse.js
23.36.79.11200 OK146 kB
aadcdn.msftauthimages.net/c1c6b6c8-3ryhipbfkhxxwptmyqh8tcus4iat4acfnhdjhttbkbi/logintenantbranding/0/illustration?ts=637058688689463941
13.107.246.53200 OK181 kB
aadcdn.msftauthimages.net/c1c6b6c8-3ryhipbfkhxxwptmyqh8tcus4iat4acfnhdjhttbkbi/logintenantbranding/0/bannerlogo?ts=637058688700493492
13.107.246.53200 OK3.0 kB
r4.res.office365.com/owa/prem/15.20.7002.28/resources/images/0/sprite1.mouse.png
23.36.79.11200 OK132 B
r4.res.office365.com/owa/prem/15.20.7002.28/resources/images/0/sprite1.mouse.css
23.36.79.11200 OK288 B
r4.res.office365.com/owa/prem/15.20.7002.28/resources/styles/0/boot.worldwide.mouse.css
23.36.79.11200 OK44 kB
kiedlng.com/aadcdn.msftauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js
193.109.120.226200 OK171 kB
r4.res.office365.com/owa/prem/15.20.7002.28/resources/styles/fonts/office365icons.woff
23.36.79.11200 OK78 kB
kiedlng.com/aadcdn.msftauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js
193.109.120.226200 OK110 kB
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=829723863a1db505
104.17.3.184200 OK180 kB
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/845325304:1700548010:qnJVPNXUft6VhmJA19cRaxVKHwE_ikiMlSeG9zpdc1w/829723863a1db505/3413b3c15aaf01a
104.17.3.184200 OK3.6 kB
kiedlng.com/aadcdn.msftauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pconfirmsend_964df482332b296c7a9c.js
193.109.120.226200 OK11 kB
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/txv8r/0x4AAAAAAANZ6huOM07-rc92/auto/normal
104.17.3.184200 OK73 kB
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/845325304:1700548010:qnJVPNXUft6VhmJA19cRaxVKHwE_ikiMlSeG9zpdc1w/829723863a1db505/3413b3c15aaf01a
104.17.3.184200 OK83 kB
challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?onload=onloadTurnstileCallback
104.17.3.184200 OK34 kB
4bfd4ade.23555334c639c3cc5f42b21b.workers.dev/favicon.ico
188.114.96.1200 OK3.3 kB
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/829723863a1db505/1700550897957/0MHkp-XQbZFCep5
104.17.3.184200 OK61 B
kiedlng.com/redirect.cgi?ref=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
193.109.120.226200 OK42 kB
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2%2BU%3D
104.17.3.184200 OK61 B
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/829723863a1db505/1700550897956/4916c78e770dabd664cdf866d183681f8e115b8d5c1d0b577a4ada77f48b625d/Y82kIN2wUEHJjDA
104.17.3.184401 Unauthorized1 B
kiedlng.com/aadcdn.msftauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_orpt-59zawtpatdv5lgnaa2.js
193.109.120.226200 OK53 kB
challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.17.3.184302 Found34 kB