SOC141 - Phishing URL Detected | Notion

Incident Details

Incident Name:	EventID: 86 - [SOC141 - Phishing URL Detected]
Description:	EventID: 86
Incident Type:	Proxy
Created Date:	Nov, 12, 2025, 10:38 PM

step 2:

Has Anyone Accessed IP/URL/Domain?

Check with Log Management whether there is a device that can access these addresses from devices in the network. Also Find answers to the following questions

When was it accessed?
What is the source address?
What is the destination address?
Which user tried to access?
What is User Agent?
Is the request blocked? Answer: yes

resource: https://www.virustotal.com/gui/url/fc7ba4838f3026b11b2c09c11db79d2f088e2b03d5074aac03c273181e3f291c/detection

https://www.virustotal.com/gui/url/bc9a5738ee4486bed5b4a0aeb29aadb745284d970453639d9d47fd219457723b

https://www.virustotal.com/gui/url/149ad5bdb6fd67fd319f5b90b96c300beee2375ddef1dacd0c60f52da9c1f8fe https://www.virustotal.com/gui/domain/mogagrocol.ru

hybrid analysis 59 score VT: a4513379dad5233afa402cc56a8b9222