Loading... Additional Content is being loaded
Windows
Analysis Report
https://form.jotform.com/243186396374063
Overview
General Information
| Sample URL: | https://form.jotform.com/243186396374063 |
| Analysis ID: | 1558826 |
| Infos: |  |
 |
|
Detection
HTMLPhisher
| Score: | 68 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 100% |
Signatures
AI detected phishing page
Yara detected HtmlPhish44
Yara detected Phisher
AI detected landing page (webpage, office document or email)
HTML body contains password input but no form action
HTML page contains hidden javascript code
Stores files to the Windows start menu directory
Classification
Phishing |
  |
|---|
| Source: |
Joe Sandbox AI: |
||
| Source: |
File source: |
||
| Source: |
File source: |
||
| Source: |
Joe Sandbox AI: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTP Parser: |
||
| Source: |
HTTPS traffic detected: |
||
| Source: |
HTTPS traffic detected: |
||
| Source: |
HTTPS traffic detected: |
||
| Source: |
HTTPS traffic detected: |
||
| Source: |
HTTPS traffic detected: |
||
| Source: |
HTTPS traffic detected: |
||
| Source: |
HTTPS traffic detected: |
||
| Source: |
HTTPS traffic detected: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
UDP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
TCP traffic detected without corresponding DNS query: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
DNS traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
Network traffic detected: |
||
| Source: |
HTTPS traffic detected: |
||
| Source: |
HTTPS traffic detected: |
||
| Source: |
HTTPS traffic detected: |
||
| Source: |
HTTPS traffic detected: |
||
| Source: |
HTTPS traffic detected: |
||
| Source: |
HTTPS traffic detected: |
||
| Source: |
HTTPS traffic detected: |
||
| Source: |
HTTPS traffic detected: |
||
| Source: |
Classification label: |
||
| Source: |
File created: |
||
| Source: |
Key opened: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Process created: |
||
| Source: |
Section loaded: |
||
| Source: |
Section loaded: |
||
| Source: |
Section loaded: |
||
| Source: |
Window detected: |
||
| Source: |
File created: |
||
| Source: |
File created: |
||
| Source: |
File created: |
||
| Source: |
File created: |
||
| Source: |
File created: |
||
| Source: |
File created: |
||
| Source: |
File created: |
||
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
Contacted Public IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 142.250.186.68 | www.google.com | United States | 15169 | GOOGLEUS | false | |
| 142.250.185.206 | play.google.com | United States | 15169 | GOOGLEUS | false | |
| 104.19.129.105 | api.jotform.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 142.250.185.227 | unknown | United States | 15169 | GOOGLEUS | false | |
| 142.250.185.202 | unknown | United States | 15169 | GOOGLEUS | false | |
| 151.101.130.137 | code.jquery.com | United States | 54113 | FASTLYUS | false | |
| 104.19.128.105 | www.jotform.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 142.250.185.163 | unknown | United States | 15169 | GOOGLEUS | false | |
| 142.250.186.110 | unknown | United States | 15169 | GOOGLEUS | false | |
| 151.101.194.137 | unknown | United States | 54113 | FASTLYUS | false | |
| 35.190.80.1 | a.nel.cloudflare.com | United States | 15169 | GOOGLEUS | false | |
| 142.250.184.206 | sheets.google.com | United States | 15169 | GOOGLEUS | false | |
| 142.250.184.228 | unknown | United States | 15169 | GOOGLEUS | false | |
| 142.250.186.99 | unknown | United States | 15169 | GOOGLEUS | false | |
| 104.22.73.81 | cdn01.jotfor.ms | United States | 13335 | CLOUDFLARENETUS | false | |
| 142.250.185.67 | unknown | United States | 15169 | GOOGLEUS | false | |
| 1.1.1.1 | unknown | Australia | 13335 | CLOUDFLARENETUS | false | |
| 108.177.15.84 | unknown | United States | 15169 | GOOGLEUS | false | |
| 172.217.16.206 | unknown | United States | 15169 | GOOGLEUS | false | |
| 142.250.184.193 | unknown | United States | 15169 | GOOGLEUS | false | |
| 35.201.118.58 | go.lb.jotform.com | United States | 15169 | GOOGLEUS | false | |
| 172.217.18.3 | unknown | United States | 15169 | GOOGLEUS | false | |
| 216.58.206.65 | googlehosted.l.googleusercontent.com | United States | 15169 | GOOGLEUS | false | |
| 142.250.185.110 | unknown | United States | 15169 | GOOGLEUS | false | |
| 34.54.32.121 | files.jotform.com | United States | 2686 | ATGS-MMD-ASUS | false | |
| 172.67.7.107 | cdn02.jotfor.ms | United States | 13335 | CLOUDFLARENETUS | false | |
| 216.58.206.46 | www3.l.google.com | United States | 15169 | GOOGLEUS | false | |
| 142.251.173.84 | unknown | United States | 15169 | GOOGLEUS | false | |
| 142.250.185.170 | unknown | United States | 15169 | GOOGLEUS | false | |
| 172.67.191.170 | u0i80kuuob1iy6zegcwamjpmstb0jwt7jfjtna3zvl06tsuf2wys.ndshalox.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
| 142.250.185.174 | docs.google.com | United States | 15169 | GOOGLEUS | false | |
| 188.114.96.3 | s6m5.gwckpfsj.ru | European Union | 13335 | CLOUDFLARENETUS | false | |
| 104.22.72.81 | cdn.jotfor.ms | United States | 13335 | CLOUDFLARENETUS | false |
Private
| IP |
|---|
| 192.168.2.16 |
Contacted Domains
| Name | IP | Active |
|---|---|---|
| cdn01.jotfor.ms | 104.22.73.81 | true |
| docs.google.com | 142.250.185.174 | true |
| a.nel.cloudflare.com | 35.190.80.1 | true |
| cdn.jotfor.ms | 104.22.72.81 | true |
| www.jotform.com | 104.19.128.105 | true |
| sheets.google.com | 142.250.184.206 | true |
| go.lb.jotform.com | 35.201.118.58 | true |
| code.jquery.com | 151.101.130.137 | true |
| www3.l.google.com | 216.58.206.46 | true |
| play.google.com | 142.250.185.206 | true |
| submit.jotform.com | 104.19.128.105 | true |
| cdn03.jotfor.ms | 104.22.72.81 | true |
| www.google.com | 142.250.186.68 | true |
| api.jotform.com | 104.19.129.105 | true |
| s6m5.gwckpfsj.ru | 188.114.96.3 | true |
| cdn02.jotfor.ms | 172.67.7.107 | true |
| u0i80kuuob1iy6zegcwamjpmstb0jwt7jfjtna3zvl06tsuf2wys.ndshalox.com | 172.67.191.170 | true |
| events.jotform.com | 104.19.129.105 | true |
| files.jotform.com | 34.54.32.121 | true |
| googlehosted.l.googleusercontent.com | 216.58.206.65 | true |
| form.jotform.com | unknown | unknown |
| accounts.youtube.com | unknown | unknown |
| blogger.googleusercontent.com | unknown | unknown |
Contacted URLs
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| true |
|
unknown | |
| true |
|
unknown |