Found via IP pivot from download.bimcollab.com

Indicator auth.hackthebank.nl Type domain Category Lure Page Confidence medium VT Score 15/94 Source urlscan First Seen 2026-04-24 08:00:16 UTC Last Seen 2026-04-24 08:00:16 UTC urlscan View scan result ↗
Raw JSON
{
  "submitter": {},
  "task": {
    "visibility": "public",
    "method": "api",
    "domain": "auth.hackthebank.nl",
    "apexDomain": "hackthebank.nl",
    "time": "2026-03-24T12:46:47.674Z",
    "uuid": "019d1fe2-0ab1-728f-9c29-572de299d44d",
    "url": "https://auth.hackthebank.nl/03846329-73c9-4951-aba3-d75659fe265b/oauth2/v2.0/authorize/",
    "tags": [
      "phishing-thesis"
    ]
  },
  "stats": {
    "uniqIPs": 3,
    "uniqCountries": 2,
    "dataLength": 1329221,
    "encodedDataLength": 375887,
    "requests": 14
  },
  "page": {
    "country": "US",
    "ip": "13.107.213.45",
    "apexDomainAgeDays": 1145,
    "language": "nl",
    "mimeType": "text/html",
    "title": "Aanmelden bij uw account",
    "url": "https://auth.hackthebank.nl/03846329-73c9-4951-aba3-d75659fe265b/oauth2/v2.0/authorize/",
    "tlsValidDays": 181,
    "tlsAgeDays": 76,
    "domainAgeDays": 245,
    "tlsValidFrom": "2026-01-07T00:00:00.000Z",
    "domain": "auth.hackthebank.nl",
    "apexDomain": "hackthebank.nl",
    "asnname": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation, US",
    "asn": "AS8075",
    "tlsIssuer": "GeoTrust TLS RSA CA G1",
    "status": "200"
  },
  "_id": "019d1fe2-0ab1-728f-9c29-572de299d44d",
  "_score": null,
  "sort": [
    1774356407674,
    "019d1fe2-0ab1-728f-9c29-572de299d44d"
  ],
  "result": "https://urlscan.io/api/v1/result/019d1fe2-0ab1-728f-9c29-572de299d44d/",
  "screenshot": "https://urlscan.io/screenshots/019d1fe2-0ab1-728f-9c29-572de299d44d.png"
}