Report Overview

  1. Visited public
    2023-12-08 13:11:22
  2. URL

    plagueworksinc.com/ess/cbd/7hk4lt/Y29saW5AYmlsbDR0aW1lLmNvbQ==?referrer=singular_click_id=77f58834-77fb-4b7a-b0a0-75f463096b8e

  3. Finishing URL

    virtueelnederland.org/redirect.cgi?ref=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmbG9naW5faGludD1jb2xpbiU0MGJpbGw0dGltZS5jb20mY2xpZW50LXJlcXVlc3QtaWQ9MGMwZmMzNmItOTE2Ny1hZTc2LTVmOTgtM2VkNGQ0ODJlNTEzJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODM3NjM3ODY0NzMyMDQyMS4yNzkwYWEzMy0zZmE5LTQwYjctYWIzMC03MTMxZDgzOWU5NGQmc3RhdGU9RGNzOURzSXdERURoQk01U3RyUk9iTlhKZ0RoSzVmNEFsdEprcWNUMThmQy03WG5uM04yNldSNE14ek5tTkRqUHhKaUFVaHdURnhCQkRQaVdFZ2hXRHJJaUJJNFk5NHpsS0xSN2V4OVRfOG4wcXYyamJmbHF1NTVicjlvR083Uld1dlE4eHEyZmZ3

  4. IP / ASN
    162.241.114.35

    #46606 UNIFIEDLAYER-AS-1

    Title
    6v8dkir2pr
  5. Phishing - Microsoft Outlook

Detections
urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
plagueworksinc.comunknown2020-05-222020-05-22 02:29:512023-12-08 12:02:04
vickishuloftherapy.orgunknown2023-12-062021-02-03 10:48:292023-12-08 12:06:18
virtueelnederland.orgunknown2023-12-062021-02-03 10:49:322023-12-08 12:53:48
outlook.office365.com512005-06-202013-04-11 01:09:242021-03-15 09:11:50
r4.res.office365.com1802005-06-202017-03-03 13:49:032023-12-07 07:29:20

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (160)

HTTP Transactions (27)

URLIPResponseSize
plagueworksinc.com/ess/cbd/7hk4lt/Y29saW5AYmlsbDR0aW1lLmNvbQ==?referrer=singular_click_id=77f58834-77fb-4b7a-b0a0-75f463096b8e
162.241.114.35 0 B
vickishuloftherapy.org/?mxsebzhb&email=colin@bill4time.com
161.35.214.39302 Found0 B
virtueelnederland.org/?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3ZpcnR1ZWVsbmVkZXJsYW5kLm9yZyIsImRvbWFpbiI6InZpcnR1ZWVsbmVkZXJsYW5kLm9yZyIsImtleSI6Ik9kZVU2cEVFbzU2dCIsInFyYyI6ImNvbGluQGJpbGw0dGltZS5jb20iLCJpYXQiOjE3MDIwNDEwNjQsImV4cCI6MTcwMjA0MTE4NH0.mCp8r9-kW6rj9Y1i_bryjz4U-mM_dGS9ikes9yU0Uyg
161.35.214.39302 Found0 B
virtueelnederland.org/?qrc=colin%40bill4time.com
161.35.214.39302 Moved Temporarily0 B
virtueelnederland.org/owa/?login_hint=colin%40bill4time.com
161.35.214.39302 Found1.4 kB
virtueelnederland.org/aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_chy_qb6g1qbjbxlng2ytiq2.css
161.35.214.39200 OK20 kB
virtueelnederland.org/aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_2TS5K5gxo-zWGrXS7stGhw2.js
161.35.214.39200 OK689 kB
virtueelnederland.org/aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
161.35.214.39200 OK17 kB
outlook.office365.com/owa/prefetch.aspx
52.98.228.226200 OK1.2 kB
virtueelnederland.org/aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg
161.35.214.39200 OK987 B
virtueelnederland.org/aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
161.35.214.39200 OK1.4 kB
virtueelnederland.org/aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg
161.35.214.39200 OK18 kB
virtueelnederland.org/aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png
161.35.214.39200 OK5.1 kB
r4.res.office365.com/owa/prem/15.20.7068.28/scripts/boot.worldwide.0.mouse.js
23.36.79.43200 OK180 kB
r4.res.office365.com/owa/prem/15.20.7068.28/scripts/boot.worldwide.1.mouse.js
23.36.79.43200 OK163 kB
r4.res.office365.com/owa/prem/15.20.7068.28/scripts/boot.worldwide.2.mouse.js
23.36.79.43200 OK170 kB
r4.res.office365.com/owa/prem/15.20.7068.28/scripts/boot.worldwide.3.mouse.js
23.36.79.43200 OK146 kB
r4.res.office365.com/owa/prem/15.20.7068.28/resources/images/0/sprite1.mouse.png
23.36.79.43200 OK132 B
r4.res.office365.com/owa/prem/15.20.7068.28/resources/images/0/sprite1.mouse.css
23.36.79.43200 OK288 B
r4.res.office365.com/owa/prem/15.20.7068.28/resources/styles/0/boot.worldwide.mouse.css
23.36.79.43200 OK44 kB
r4.res.office365.com/owa/prem/15.20.7068.28/resources/styles/fonts/office365icons.woff
23.36.79.43200 OK78 kB
virtueelnederland.org/aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js
161.35.214.39200 OK36 kB
r4.res.office365.com/owa/prem/15.20.7068.28/resources/styles/fonts/office365icons.woff
23.36.79.43200 OK78 kB
virtueelnederland.org/redirect.cgi?ref=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
161.35.214.39200 OK42 kB
virtueelnederland.org/aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js
161.35.214.39200 OK110 kB
virtueelnederland.org/aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
161.35.214.39200 OK1.6 kB
virtueelnederland.org/aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_fmhisaxpoaglzwf5og-iag2.js
161.35.214.39200 OK53 kB