Report - webmail.cm-porto.pt/

Report Overview

Visited public
2024-12-22 11:44:39
Tags
microsoft phishing
URL
webmail.cm-porto.pt/
Finishing URL
webmail.cm-porto.pt/
IP / ASN
185.101.179.24
#29615 Associacao Porto Digital
Title
Outlook
Phishing - Microsoft

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
webmail.cm-porto.pt	unknown	1997-11-06	2018-05-31	2022-05-05	2.1 kB	85 kB	185.101.179.24

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	webmail.cm-porto.pt/	ScriptElement	74 B	2024-12-22	2024-12-22
Pretty URL webmail.cm-porto.pt/ IP 185.101.179.24 ASN #29615 Associacao Porto Digital Introduced by scriptElement Embedded in HTML true Observations First Seen2024-12-22 11:44 Last Seen2024-12-22 11:44 Times Seen1 Hash 842a8d5cd9caedf6af765a8e099b1d93 7535f3dbd2a699f7af57a8104cfe95b5073c28b0 0afaaecc356cfb465cbbc33f91afd5a8a695b0209be9b6b4517ec3c9c1d57a47 Loading...

HTTP Transactions (4)

URL IP Response Size

webmail.cm-porto.pt/

185.101.179.24

200 OK

28 kB

URL User Request GET HTTP/1.1
webmail.cm-porto.pt/
IP
185.101.179.24:443
ASN
#29615 Associacao Porto Digital

Certificate
IssuerMarketWare - Soluções para Mercados Digitais, Lda.
Subject*.cm-porto.pt
Fingerprint94:F8:10:08:06:A6:F7:23:BC:DF:3E:01:C4:1C:B7:54:10:6B:23:04
ValidityMon, 12 Feb 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document text HTML document, ASCII text, with very long lines (27973), with no line terminators
Size
28 kB (27973 bytes)
Hash
b7ad203f3bf58730dd7572a10b8c7686
83166c8bf5aa4d6930580a2a335cb2d4a56ba2aa
212995d5a027d384451ca37521c73a28781964ddb95fedf8e40aca1e4a66de98

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET / HTTP/1.1
Host: webmail.cm-porto.pt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Cache-Control: no-store
Content-Length: 27973
Set-Cookie: cookiesession3=Rm9ydGl3ZWIK; domain=webmail.cm-porto.pt; path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload

webmail.cm-porto.pt/owa/auth/15.2.1118/themes/resources/segoeui-regular.ttf

185.101.179.24

200 OK

28 kB

URL GET HTTP/1.1
webmail.cm-porto.pt/owa/auth/15.2.1118/themes/resources/segoeui-regular.ttf
IP
185.101.179.24:443
ASN
#29615 Associacao Porto Digital

Requested by
https://webmail.cm-porto.pt/
Certificate
IssuerMarketWare - Soluções para Mercados Digitais, Lda.
Subject*.cm-porto.pt
Fingerprint94:F8:10:08:06:A6:F7:23:BC:DF:3E:01:C4:1C:B7:54:10:6B:23:04
ValidityMon, 12 Feb 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document text HTML document, ASCII text, with very long lines (28049), with no line terminators
Size
28 kB (28049 bytes)
Hash
c2d3f9b80836bb00871aec69c57d5c6a
1387c8d1e99d99ecad587631df0d0681f9143129
2da1ead783cdde59155ec59bb549e076d2851a5502f5ec4fd1cc0722c5bb0697

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /owa/auth/15.2.1118/themes/resources/segoeui-regular.ttf HTTP/1.1
Host: webmail.cm-porto.pt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webmail.cm-porto.pt/
Cookie: cookiesession3=Rm9ydGl3ZWIK
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Cache-Control: no-store
Content-Length: 28049
Set-Cookie: cookiesession3=Rm9ydGl3ZWIK; domain=webmail.cm-porto.pt; path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload

webmail.cm-porto.pt/owa/auth/15.2.1118/themes/resources/segoeui-semilight.ttf

185.101.179.24

200 OK

28 kB

URL GET HTTP/1.1
webmail.cm-porto.pt/owa/auth/15.2.1118/themes/resources/segoeui-semilight.ttf
IP
185.101.179.24:443
ASN
#29615 Associacao Porto Digital

Requested by
https://webmail.cm-porto.pt/
Certificate
IssuerMarketWare - Soluções para Mercados Digitais, Lda.
Subject*.cm-porto.pt
Fingerprint94:F8:10:08:06:A6:F7:23:BC:DF:3E:01:C4:1C:B7:54:10:6B:23:04
ValidityMon, 12 Feb 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document text HTML document, ASCII text, with very long lines (28049), with no line terminators
Size
28 kB (28049 bytes)
Hash
e8544e1c2e80cba42fafbd2cbd4e15ab
6c87fd50aab178b537f4fa77171fb705723ade78
e3ded075b5ceb7254c81831c0194a8d5959b1f7635cf2eec161e307a48d2f264

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /owa/auth/15.2.1118/themes/resources/segoeui-semilight.ttf HTTP/1.1
Host: webmail.cm-porto.pt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webmail.cm-porto.pt/
Cookie: cookiesession3=Rm9ydGl3ZWIK
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Cache-Control: no-store
Content-Length: 28049
Set-Cookie: cookiesession3=Rm9ydGl3ZWIK; domain=webmail.cm-porto.pt; path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload

webmail.cm-porto.pt/owa/auth/15.2.1118/themes/resources/favicon.ico

185.101.179.24

404 Not Found

89 B

URL GET HTTP/1.1
webmail.cm-porto.pt/owa/auth/15.2.1118/themes/resources/favicon.ico
IP
185.101.179.24:443
ASN
#29615 Associacao Porto Digital

Requested by
https://webmail.cm-porto.pt/
Certificate
IssuerMarketWare - Soluções para Mercados Digitais, Lda.
Subject*.cm-porto.pt
Fingerprint94:F8:10:08:06:A6:F7:23:BC:DF:3E:01:C4:1C:B7:54:10:6B:23:04
ValidityMon, 12 Feb 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with no line terminators
Size
89 B (89 bytes)
Hash
d9b4f0e1499dd9e3fb0f989040f85981
0578446d95be99ee3fee134b4355415223f835d0
25aecb45ff59d421d223248e388d71ff0478562d8eddd0a3b0e274ec71579e6b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /owa/auth/15.2.1118/themes/resources/favicon.ico HTTP/1.1
Host: webmail.cm-porto.pt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webmail.cm-porto.pt/
Cookie: cookiesession3=Rm9ydGl3ZWIK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Length: 89
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (4)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers