Report Overview

  1. Visited public
    2025-02-19 08:46:52
  2. URL

    www.subbly.co/referral_program?r=326936&return=HtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQHNsdXJwbWFpbC5uZXQ=&opi=256371986142&usg=lxfGUQNysmkDx&source=gmail&ust=9267284461223020&usg=AOaY2pZBJ0UQjng20rOWFwZaY2pZBJ0UQqR230/1/010001951a9ed9e2-68501440-db10-4a3b-b44d-79f205acc376-000000/EU-jlW_82exR-vPRl5XMMjNw3lQ=413HtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQGRhbmRkZ2FyYWdlZG9vcnMuY29tHtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQGRhbmRkZ2FyYWdlZG9vcnMuY29tHtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQGRhbmRkZ2FyYWdlZG9vcnMuY29tHtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQGRhbmRkZ2FyYWdlZG9vcnMuY29tHtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQGRhbmRkZ2FyYWdlZG9vcnMuY29tHtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQGRhbmRkZ2FyYWdlZG9vcnMuY29tHtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQGRhbmRkZ2FyYWdlZG9vcnMuY29tHtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQGRhbmRkZ2FyYWdlZG9vcnMuY29t

  3. Finishing URL

    nv.vwnrju.ru/bbtxjkwxobxgugbplpdpzhfpojdgvnyytrymyoareths6q6lnhdh97ut4wdpckr?MMUZPZDQMAGGRHLHPWAENIK

  4. IP / ASN
    104.18.5.93

    #13335 CLOUDFLARENET

    Title
    Microsoft Secure Login
  5. Phishing - Microsoft

    Phishing - Generic phishing

    Phishing - Microsoft Outlook

    Suspicious - Anti-debugging code

Detections
urlquery
52
Network Intrusion Detection
1
Threat Detection Systems
2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
challenges.cloudflare.comunknown2009-02-172021-10-202025-02-19
cdnjs.cloudflare.com2352009-02-172012-05-232025-02-19
ok4static.oktacdn.com165922014-11-112018-06-152025-02-18
get.geojs.io174182017-02-182017-03-302025-02-15
objects.githubusercontent.com1340602014-02-062021-11-012025-02-19
www.subbly.counknown2013-11-262014-12-042025-02-18
alumincompanybw.comunknown2021-02-262021-02-262024-03-01
code.jquery.com6342005-12-102012-05-212025-02-19
nv.vwnrju.ruunknown2025-02-082025-02-182025-02-18
github.com14232007-10-092016-07-132025-02-19
ugucjlk2t1ujwutlgtcviovdazaaxdpv2ii9ggovabejn6zfapmmzs0ea.bbjcgw.ruunknown2025-02-112025-02-192025-02-19

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IP 104.26.0.100

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumbbjcgw.ruSinkholed

ThreatFox

No alerts detected


JavaScript (17)

HTTP Transactions (42)

URLIPResponseSize
www.subbly.co/referral_program?r=326936&return=HtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQHNsdXJwbWFpbC5uZXQ=&opi=256371986142&usg=lxfGUQNysmkDx&source=gmail&ust=9267284461223020&usg=AOaY2pZBJ0UQjng20rOWFwZaY2pZBJ0UQqR230/1/010001951a9ed9e2-68501440-db10-4a3b-b44d-79f205acc376-000000/EU-jlW_82exR-vPRl5XMMjNw3lQ=413HtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQGRhbmRkZ2FyYWdlZG9vcnMuY29tHtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQGRhbmRkZ2FyYWdlZG9vcnMuY29tHtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQGRhbmRkZ2FyYWdlZG9vcnMuY29tHtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQGRhbmRkZ2FyYWdlZG9vcnMuY29tHtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQGRhbmRkZ2FyYWdlZG9vcnMuY29tHtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQGRhbmRkZ2FyYWdlZG9vcnMuY29tHtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQGRhbmRkZ2FyYWdlZG9vcnMuY29tHtTPs://alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQGRhbmRkZ2FyYWdlZG9vcnMuY29t
104.18.5.93301 Moved Permanently472 B
alumincompanybw.com/auth/oy0KWKhcRZoQAfH0o8sz0JFf/ZGFsbGFzQHNsdXJwbWFpbC5uZXQ=
192.64.117.201200 OK0 B
challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.18.94.41302 Found0 B
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.25.14200 OK14 kB
code.jquery.com/jquery-3.6.0.min.js
151.101.130.137200 OK31 kB
challenges.cloudflare.com/turnstile/v0/g/0e3e6804b971/api.js
104.18.94.41200 OK17 kB
nv.vwnrju.ru/Is5axnrWbRNTrs/
104.21.24.27200 OK35 kB
nv.vwnrju.ru/taQpv1hyHZXMpy49rmWNrbF3acQRtr
104.21.24.27200 OK40 kB
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.25.14200 OK14 kB
nv.vwnrju.ru/xy5C6ABgYRfQeADUOyjMJZhkRwq2XqffKG4bXtelhOdfJfw
104.21.24.27200 OK105 kB
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.25.14200 OK14 kB
nv.vwnrju.ru/GDSherpa-bold.woff2
104.21.24.27200 OK28 kB
nv.vwnrju.ru/GDSherpa-bold.woff
104.21.24.27200 OK36 kB
nv.vwnrju.ru/GDSherpa-regular.woff2
104.21.24.27200 OK29 kB
nv.vwnrju.ru/GDSherpa-regular.woff
104.21.24.27200 OK37 kB
nv.vwnrju.ru/GDSherpa-vf.woff2
104.21.24.27200 OK44 kB
nv.vwnrju.ru/GDSherpa-vf2.woff2
104.21.24.27200 OK93 kB
ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7
143.204.55.47200 OK11 kB
nv.vwnrju.ru/ije2KsRgY494nJnzHMwOpEN7VyTPDrRF9QxyNjJKb91xyJ97DE0wLWhsd92l6Q212210
104.21.24.27200 OK25 kB
nv.vwnrju.ru/wxFnc9StEUmtTwGbw2RSHLTFopIoaXx9wxuCqK34129
104.21.24.27200 OK644 B
nv.vwnrju.ru/opDeUBM9zr4To4xIvYQPBBbKiGl100ATRnmnwjpZ42gA8MPUYYZE9qTdu45133
104.21.24.27200 OK892 B
github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js
140.82.121.3302 Found0 B
nv.vwnrju.ru/abj8rj8kpqiKCrgh28
104.21.24.27200 OK6.1 kB
nv.vwnrju.ru/uvcM28Gt3dWC5nPzOg3bZYjtbXl4mnaJBa3EO8fZJ85gzyWmQby64ntSef260
104.21.24.27200 OK18 kB
nv.vwnrju.ru/qrK24XLb3s3JLzZHZhsWoEHFkJEGXgAthxBuvWGn4GPSrTPde2ovTfRURSAfxef240
104.21.24.27200 OK9.6 kB
nv.vwnrju.ru/opZjm8yhxqCqHIiymLqrocC3M4gbaEYCoEtRLiPgMuvuT31yE8gJsEmF8ZPoKp8cd196
104.21.24.27200 OK10 kB
ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2
143.204.55.47200 OK20 kB
nv.vwnrju.ru/klcA78EBpv6ygFvujaLrwCIt8tHZxOg49WhorNWORA7SCbliopgD2fSBZytpy3XVfk97hCsab229
104.21.24.27200 OK1.3 kB
ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
143.204.55.47200 OK10 kB
nv.vwnrju.ru/favicon.ico
104.21.24.27404 Not Found0 B
nv.vwnrju.ru/klRWqE1dKIodhWl4TpdaxFJijhYuapwgllaKZfmtQJkSm0tLq8uv214
104.21.24.27200 OK1.9 kB
ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
143.204.55.47200 OK223 kB
nv.vwnrju.ru/ij3Ivke3gLCviqSYzdVPuSBgF8TI3Yg7FcdHPBdPiNyYjZqWSxLA56170
104.21.24.27200 OK7.4 kB
nv.vwnrju.ru/34hWgQUp6aGXabqKeGrF6720
104.21.24.27200 OK27 kB
ugucjlk2t1ujwutlgtcviovdazaaxdpv2ii9ggovabejn6zfapmmzs0ea.bbjcgw.ru/4474001581746548ZwcAEyVLMJJBGRONXLWSSNYRZFQFLBFCCHMYWUFJIVGNBOVPrsFQJ4XtsFAmaVPGCum34YQYXXwx35
172.67.133.24200 OK536 B
nv.vwnrju.ru/bbtxjkwxobxgugbplpdpzhfpojdgvnyytrymyoareths6q6lnhdh97ut4wdpckr?MMUZPZDQMAGGRHLHPWAENIK
104.21.24.27200 OK288 kB
nv.vwnrju.ru/mnWR2yRlju3JMB6nX5RQR5pudrGyYijJzRGOtCpcOVv23q1vSF90150
104.21.24.27200 OK270 B
nv.vwnrju.ru/yzNVEMf1R0xeDWCUU82VemnQYia5opWzVZjKt6ZYDH1PLKab178
104.21.24.27200 OK2.9 kB
objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250219%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250219T084452Z&X-Amz-Expires=300&X-Amz-Signature=997487f5133e1bb6d69a9efaa42be2a036a414600b1ab6ef001d113764f8940f&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
185.199.108.133200 OK10 kB
nv.vwnrju.ru/34qa1LV3bc9S2tijsxAvRJl3gaPhnLP67104
104.21.24.27200 OK4.8 MB
nv.vwnrju.ru/sq4d6XW8NCVHIPHvS60wckLVrsBWPnqmM6n3QP7fWs88zEkp
104.21.24.27200 OK2.8 kB
get.geojs.io/v1/ip/geo.json
104.26.0.100200 OK336 B