Report Overview

  1. Visited public
    2025-02-19 14:39:20
  2. URL

    www.subbly.co/referral_program?r=326936&return=HtTPs://alumincompanybw.com/auth/4brCArSMq0cmH8RNSsivmDCa/ZHNhcmFuaWNoQHNsdXJwbWFpbC5uZXQ=&opi=256371986142&usg=lxfGUQNysmkDx&source=gmail&ust=9267284461223020&usg=AOaY2pZBJ0UQjng20rOWFwZaY2pZBJ0UQqR230%C2%A0HtTPs://alumincompanybw.com/auth/4brCArSMq0cmH8RNSsivmDCa/ZHNhcmFuaWNoQG5obXMuY29t

  3. Finishing URL

    nv.vwnrju.ru/vihxtaxldmpxD2T8L5KV88X1HOW0OT5YO2K?UNYGNMSFMZUPEF

  4. IP / ASN
    104.18.4.93

    #13335 CLOUDFLARENET

    Title
    Microsoft Secure Login
  5. Phishing - Microsoft

    Phishing - Generic phishing

    Phishing - Microsoft Outlook

    Suspicious - Anti-debugging code

Detections
urlquery
54
Network Intrusion Detection
1
Threat Detection Systems
2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ok4static.oktacdn.com165922014-11-112018-06-152025-02-18
objects.githubusercontent.com1340602014-02-062021-11-012025-02-19
42en7agi3kmw24gofiwesrsaz7vhbeq3tyen3zqu9cvffvd1xen.gvkbzu.ruunknown2025-02-082025-02-192025-02-19
cdnjs.cloudflare.com2352009-02-172012-05-232025-02-19
code.jquery.com6342005-12-102012-05-212025-02-19
nv.vwnrju.ruunknown2025-02-082025-02-182025-02-18
l4seyc.br-izeffs.ruunknown2025-02-122025-02-192025-02-19
get.geojs.io174182017-02-182017-03-302025-02-15
github.com14232007-10-092016-07-132025-02-19
www.subbly.counknown2013-11-262014-12-042025-02-18
challenges.cloudflare.comunknown2009-02-172021-10-202025-02-19

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IP 172.67.70.233

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumgvkbzu.ruSinkholed

ThreatFox

No alerts detected


JavaScript (17)

HTTP Transactions (42)

URLIPResponseSize
www.subbly.co/referral_program?r=326936&return=HtTPs://alumincompanybw.com/auth/4brCArSMq0cmH8RNSsivmDCa/ZHNhcmFuaWNoQHNsdXJwbWFpbC5uZXQ=&opi=256371986142&usg=lxfGUQNysmkDx&source=gmail&ust=9267284461223020&usg=AOaY2pZBJ0UQjng20rOWFwZaY2pZBJ0UQqR230%C2%A0HtTPs://alumincompanybw.com/auth/4brCArSMq0cmH8RNSsivmDCa/ZHNhcmFuaWNoQG5obXMuY29t
104.18.5.93301 Moved Permanently0 B
challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.18.94.41302 Found0 B
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK14 kB
code.jquery.com/jquery-3.6.0.min.js
151.101.194.137200 OK31 kB
challenges.cloudflare.com/turnstile/v0/g/0e3e6804b971/api.js
104.18.94.41200 OK17 kB
nv.vwnrju.ru/Is5axnrWbRNTrs/
104.21.24.27200 OK30 kB
l4seyc.br-izeffs.ru/ando!q9suwc
104.21.32.1200 OK284 B
code.jquery.com/jquery-3.6.0.min.js
151.101.194.137200 OK31 kB
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK14 kB
nv.vwnrju.ru/vihxtaxldmpxD2T8L5KV88X1HOW0OT5YO2K?UNYGNMSFMZUPEF
104.21.24.27200 OK104 kB
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK14 kB
nv.vwnrju.ru/GDSherpa-bold.woff2
104.21.24.27200 OK28 kB
nv.vwnrju.ru/GDSherpa-bold.woff
104.21.24.27200 OK36 kB
nv.vwnrju.ru/GDSherpa-regular.woff2
104.21.24.27200 OK29 kB
nv.vwnrju.ru/GDSherpa-regular.woff
104.21.24.27200 OK37 kB
nv.vwnrju.ru/GDSherpa-vf.woff2
104.21.24.27200 OK44 kB
nv.vwnrju.ru/GDSherpa-vf2.woff2
104.21.24.27200 OK93 kB
ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7
143.204.55.81200 OK11 kB
nv.vwnrju.ru/qrqWOeY3owjLQQSqXQefe2pau5V4Os8QycR4P67137
104.21.24.27200 OK892 B
nv.vwnrju.ru/favicon.ico
104.21.24.27404 Not Found3 B
nv.vwnrju.ru/wxTkNZk2Btvk1KUqnyXbGNhropNWA0vLRIvL12130
104.21.24.27200 OK644 B
objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250219%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250219T143843Z&X-Amz-Expires=300&X-Amz-Signature=eb75f3a16405722445188fc2afcf8fabf6dc7f7d1c7b316f30c4986e321f4d8f&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
185.199.111.133200 OK10 kB
nv.vwnrju.ru/qrSzPiFQaERdQ1SMggaaR1RQUNyGVLlAYEstOznD79FxRza5hYHegStVMwanu5KiKIef233
104.21.24.27200 OK9.6 kB
nv.vwnrju.ru/ijYRRYFJiqdM1wLIr4FJYIBkAPMm6oFrtlvMtEA2FkdXxydyhrIXgR2tijVGM7knv6UfgiInrua112210
104.21.24.27200 OK25 kB
ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2
143.204.55.81200 OK20 kB
nv.vwnrju.ru/kfq1QBrucr8KqGL7REwq5ePbgnGaCYfeew
104.21.24.27200 OK1.5 kB
nv.vwnrju.ru/stugwojh2j1e2C9RZvEk889NMGX7WTg45MHAeai35YWzCyz6Od0UNGUuA81ef251
104.21.24.27200 OK18 kB
get.geojs.io/v1/ip/geo.json
172.67.70.233200 OK336 B
nv.vwnrju.ru/56IqnSETEFryzwxy12MD96712
104.21.24.27200 OK27 kB
nv.vwnrju.ru/rsVWTa9npIp7V4GARA33T7jVunUGssKIzm4l82YEDghYaZrL3rqOXx7STEcd199
104.21.24.27200 OK268 B
nv.vwnrju.ru/nglDBWhFnh5hIN9Hd7VV64TSepySWfbyTWzKb8YvaGmtWiv6i
104.21.24.27200 OK3.0 kB
ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
143.204.55.81200 OK223 kB
nv.vwnrju.ru/mnckvUMP5uh5HRZA4UvkTcOmvbNIijfBBjFVG0GvWgBqxFmLuv220
104.21.24.27200 OK1.9 kB
nv.vwnrju.ru/klED4txGgd2L1qzEXO6Sou4pHTqb1NyzWzkeOgRmUiexLztYYuDstPZOI56166
104.21.24.27200 OK7.4 kB
ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
143.204.55.81200 OK10 kB
nv.vwnrju.ru/xyVDBTo1i7Lepq5Cgh30
104.21.24.27200 OK36 kB
nv.vwnrju.ru/wxC1tM2Y6lGmtYEVUZu8Nl30WePA5a93texufop4gpjAA8JiG1YW48Cg5390180
104.21.24.27200 OK2.9 kB
nv.vwnrju.ru/56cF0RY4kIWzcvNi7leLghZvRUqQSg0Z7yXeAL89110
104.21.24.27200 OK4.8 MB
42en7agi3kmw24gofiwesrsaz7vhbeq3tyen3zqu9cvffvd1xen.gvkbzu.ru/jvitjgoozzndufjdaksbzktwaDJXUEzeEXSHYSFMBLQNQBIMURCTOTXPLPIWAWSrsEDI9VoKpHlbEi34Hguv40
104.21.112.1200 OK536 B
github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js
140.82.121.4302 Found10 kB
nv.vwnrju.ru/klEftPB0XD2farWfrvkBSoPpftlPeXEUf89AXHalVMmh66Os3HCNvxHoFVOyz230
104.21.24.27200 OK1.3 kB
nv.vwnrju.ru/mnVzaQwkwsgLRKfwqdcJ3mHBmYBGBF95hlkldiuGPgkxjgWgb78145
104.21.24.27200 OK270 B