Report Overview

  1. Submitted URL

    r20.rs6.net/tn.jsp?f=0016Ng0ERj23olTxD3FmSwUyyEe8LPR6PMb0bO8GUQ3ret-PUlvHaFUuIXwAFQybJ5iRuVXokXt3ohd9NsgnjldUZ4uKD-xVDs-9DeYqysaHZVayKvTW7Jw_DAcgpxm4m4uL0QkV7aexHtY6CmgY65_ZDpos0as_eiN&c=3gUaYgBa0Vg1_ddC2E59DOXoMComHXB1PefDgu6YzNFAANWntjTHnQ==&ch=qD8iN7L-cF95isEjzhpLYALMDW3wquAxQMrtI9nExAJ3D-fTxsnbIA==&__=/prmq/amFrZS5icm9kc2dhYXJkQGFkYW1hLmNvbQ==

  2. IP

    208.75.122.11

    ASN

    #40444 ASN-CC

  3. Submitted

    2023-12-06 16:42:16

    Access

    public

  4. Website Title

    ygo035bplo

  5. Final URL

    refreshinguser.com/redirect.cgi?ref=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

  6. urlquery detections

    Phishing - Microsoft Outlook

Detections

  1. urlquery

    3

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
autologon.microsoftazuread-sso.com15342016-07-222017-01-302023-12-06
aadcdn.msauth.net14212018-10-252018-11-192023-12-05
r20.rs6.net67352001-12-212014-04-182023-12-06
foxcatcher.deunknownunknown2015-02-162023-12-06
reliableasqhalt.comunknown2023-11-172023-12-062023-12-06
refreshinguser.comunknown2023-10-052023-10-052023-10-24
outlook.office365.com512005-06-202013-04-112021-03-15
r4.res.office365.com1802005-06-202017-03-032023-12-06

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (152)

HTTP Transactions (36)

URLIPResponseSize
r20.rs6.net/tn.jsp?f=0016Ng0ERj23olTxD3FmSwUyyEe8LPR6PMb0bO8GUQ3ret-PUlvHaFUuIXwAFQybJ5iRuVXokXt3ohd9NsgnjldUZ4uKD-xVDs-9DeYqysaHZVayKvTW7Jw_DAcgpxm4m4uL0QkV7aexHtY6CmgY65_ZDpos0as_eiN&c=3gUaYgBa0Vg1_ddC2E59DOXoMComHXB1PefDgu6YzNFAANWntjTHnQ==&ch=qD8iN7L-cF95isEjzhpLYALMDW3wquAxQMrtI9nExAJ3D-fTxsnbIA==&__=/prmq/amFrZS5icm9kc2dhYXJkQGFkYW1hLmNvbQ==
208.75.122.11 0 B
foxcatcher.de/kius/lsiu//prmq/amFrZS5icm9kc2dhYXJkQGFkYW1hLmNvbQ==
173.208.131.82 20 B
reliableasqhalt.com/?ghmppoae&qrc=jake.brodsgaard@adama.com
207.154.245.53302 Found0 B
refreshinguser.com/?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3JlZnJlc2hpbmd1c2VyLmNvbSIsImRvbWFpbiI6InJlZnJlc2hpbmd1c2VyLmNvbSIsImtleSI6Im5uWk5LQ1pwR2RTRyIsInFyYyI6Impha2UuYnJvZHNnYWFyZEBhZGFtYS5jb20iLCJpYXQiOjE3MDE4ODA5MTgsImV4cCI6MTcwMTg4MTAzOH0.71VZcOThxbI7fd-Qfgj-1H86C_WcTt9CrUvHHGkb1N4
207.154.245.53302 Found0 B
refreshinguser.com/?qrc=jake.brodsgaard%40adama.com
207.154.245.53302 Moved Temporarily0 B
refreshinguser.com/owa/?login_hint=jake.brodsgaard%40adama.com
207.154.245.53302 Found1.4 kB
refreshinguser.com/aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0gg2.css
207.154.245.53200 OK20 kB
refreshinguser.com/aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_xQ_4cu5kMxqWy6T1zLKcgw2.js
207.154.245.53200 OK689 kB
refreshinguser.com/aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
207.154.245.53200 OK17 kB
outlook.office365.com/owa/prefetch.aspx
132.245.230.9200 OK1.2 kB