Score: | 80 |
Range: | 0 - 100 |
Whitelisted: | false |
Confidence: | 100% |
AV Detection: |
---|
Antivirus / Scanner detection for submitted sample |
Source: |
SlashNext: |
Antivirus detection for URL or domain |
Source: |
SlashNext: |
||
Source: |
SlashNext: |
Phishing: |
---|
Phishing site detected (based on favicon image match) |
Source: |
Matcher: |
Yara detected HtmlPhish_10 |
Source: |
File source: |
||
Source: |
File source: |
Phishing site detected (based on image similarity) |
Source: |
Matcher: |
Jump to dropped file |
Phishing site detected (based on logo template match) |
Source: |
Matcher: |
HTML body contains low number of good links |
Source: |
HTTP Parser: |
||
Source: |
HTTP Parser: |
||
Source: |
HTTP Parser: |
||
Source: |
HTTP Parser: |
HTML title does not match URL |
Source: |
HTTP Parser: |
||
Source: |
HTTP Parser: |
||
Source: |
HTTP Parser: |
||
Source: |
HTTP Parser: |
Suspicious form URL found |
Source: |
HTTP Parser: |
||
Source: |
HTTP Parser: |
||
Source: |
HTTP Parser: |
||
Source: |
HTTP Parser: |
Source: |
HTTP Parser: |
||
Source: |
HTTP Parser: |
||
Source: |
HTTP Parser: |
||
Source: |
HTTP Parser: |
Source: |
HTTP Parser: |
||
Source: |
HTTP Parser: |
||
Source: |
HTTP Parser: |
||
Source: |
HTTP Parser: |
Compliance: |
---|
Uses new MSVCR Dlls |
Source: |
File opened: |
Jump to behavior |
Uses secure TLS version for HTTPS connections |
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
Source: |
DNS traffic detected: |
Source: |
String found in binary or memory: |
||
Source: |
String found in binary or memory: |
||
Source: |
String found in binary or memory: |
||
Source: |
String found in binary or memory: |
||
Source: |
String found in binary or memory: |
||
Source: |
String found in binary or memory: |
||
Source: |
String found in binary or memory: |
||
Source: |
String found in binary or memory: |
||
Source: |
String found in binary or memory: |
||
Source: |
String found in binary or memory: |
||
Source: |
String found in binary or memory: |
||
Source: |
String found in binary or memory: |
||
Source: |
String found in binary or memory: |
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
Source: |
Classification label: |
Source: |
File created: |
Jump to behavior |
Source: |
File created: |
Jump to behavior |
Source: |
File read: |
Jump to behavior |
Source: |
Process created: |
|||
Source: |
Process created: |
|||
Source: |
Process created: |
Jump to behavior |
Source: |
Automated click: |
||
Source: |
Automated click: |
||
Source: |
Automated click: |
||
Source: |
Automated click: |
Source: |
Window detected: |
Source: |
File opened: |
Jump to behavior |
IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
---|---|---|---|---|---|---|
51.91.19.20 | unknown | France | 16276 | OVHFR | false | |
69.49.229.38 | unknown | United States | 46606 | UNIFIEDLAYER-AS-1US | false |
Name | IP | Active |
---|---|---|
budgegrowth.com | 69.49.229.38 | true |
school-resources.co.uk | 51.91.19.20 | true |
ulfn.us7.list-manage.com | unknown | unknown |
Name | Malicious | Antivirus Detection | Reputation |
---|---|---|---|
true |
|
unknown | |
true |
|
unknown |