Report Overview
Visitedpublic
2023-11-01 11:51:51
Tags
Submit Tags
URL
api-eu.targetx.com/email-interact/redirect?id=MTEwMDAwNTMwIE5vbmUgOTE5MCBUTVNfdGVzdF9yZWNpcGllbnRfaWQ=&link=https://bejewled-strengthened-apparatus.glitch.me/customindex.html
Finishing URL
bejewled-strengthened-apparatus.glitch.me/customindex.html
IP / ASN
143.204.55.90
#16509 AMAZON-02
Title
Sign in to your account

Detections

urlquery
0
Network Intrusion Detection
7
Threat Detection Systems
4

Host Summary

HostRankRegisteredFirst SeenLast Seen
cubehcs.com
unknown2020-10-212021-01-01 21:58:582023-10-28 16:45:29
api-eu.targetx.com
unknown1998-07-012020-05-06 13:57:032023-10-31 21:31:53
bejewled-strengthened-apparatus.glitch.me
unknownunknownNo dataNo data
code.jquery.com
6342005-12-102012-05-21 19:28:022023-10-31 08:16:05
aadcdn.msftauth.net
14552018-10-252018-11-19 11:50:322023-10-31 05:23:09
aadcdn.msauth.net
14212018-10-252018-11-19 11:50:032023-10-31 05:11:15

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
highClient IPInternal IPET PHISHING Possible Glitch.me Phishing Domain
mediumClient IPInternal IPET HUNTING Suspicious Glitch Hosted DNS Request - Possible Phishing Landing
highClient IPInternal IPET PHISHING Possible Glitch.me Phishing Domain
mediumClient IPInternal IPET HUNTING Suspicious Glitch Hosted DNS Request - Possible Phishing Landing
mediumClient IP
107.20.206.59
ET HUNTING Suspicious Glitch Hosted TLS SNI Request - Possible Phishing Landing
highClient IPInternal IPET PHISHING Possible Glitch.me Phishing Domain
mediumClient IPInternal IPET HUNTING Suspicious Glitch Hosted DNS Request - Possible Phishing Landing

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish
SeverityIndicatorAlert
mediumapi-eu.targetx.com/email-interact/redirect?id=MTEwMDAwNTMwIE5vbmUgOTE5MCBUTVNfdGVzdF9yZWNpcGllbnRfaWQ=&link=https://bejewled-strengthened-apparatus.glitch.me/customindex.htmlOffice365
mediumbejewled-strengthened-apparatus.glitch.me/customindex.htmlOffice365

PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (3)

HTTP Transactions (9)

URLIPResponseSize
GET api-eu.targetx.com/email-interact/redirect?id=MTEwMDAwNTMwIE5vbmUgOTE5MCBUTVNfdGVzdF9yZWNpcGllbnRfaWQ=&link=https://bejewled-strengthened-apparatus.glitch.me/customindex.html
143.204.55.90302 Found2 B
GET bejewled-strengthened-apparatus.glitch.me/customindex.html
107.20.206.59200 OK115 kB
GET code.jquery.com/jquery-3.1.1.min.js
151.101.194.137200 OK30 kB
GET aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
152.199.23.37200 OK1.4 kB
GET aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
13.107.213.53200 OK621 B
GET aadcdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
13.107.213.53200 OK276 B
GET aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
152.199.23.37200 OK673 B
GET bejewled-strengthened-apparatus.glitch.me/favicon.ico
107.20.206.59404 Not Found3.7 kB
GET cubehcs.com/wp-content/prv.php?id=
188.114.97.1200 OK0 B